PT-2002-1099 · Plesk · Plesk Server Administrator

Publicado 2002-03-15 · Atualizado 2008-09-05 · CVE-2001-1222

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Plesk Server Administrator (PSA) version 1.0

Description The issue allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.

Recommendations For Plesk Server Administrator (PSA) version 1.0, consider restricting access to sensitive PHP files until a patch is available. As a temporary workaround, limit the exposure of account names and IP addresses to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-1222

Produtos afetados

Plesk Server Administrator

Referências · 5

• http://securityfocus.com/archive/1/246861 · Aviso do Fabricante
• http://securityfocus.com/bid/3737 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1222 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1222 · Nota de Segurança
• http://iss.net/security_center/static/7735.php · Aviso do Fabricante