PT-2001-2475 · Namazu · Namazu

Publicado 2001-12-27 · Atualizado 2017-10-10 · CVE-2001-1352

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Namazu versions 2.0.9 and earlier

Description A cross-site scripting issue allows remote attackers to execute arbitrary Javascript as other web users. This is achieved via an error message returned when an invalid index file is specified in the idxname parameter.

Recommendations For Namazu versions 2.0.9 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2001-1352

Produtos afetados

Namazu

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/7875 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1352 · Nota
• http://marc.info/?l=bugtraq&m=101060476404565&w=2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1352 · Nota de Segurança
• http://osvdb.org/5691 · Nota
• http://marc.info/?l=bugtraq&m=100947261916155&w=2 · Nota
• http://marc.info/?l=bugtraq&m=101068116016472&w=2 · Nota