PT-2002-1193 · Cacheflow · Cacheflow Cacheos

Publicado 2002-03-25 · Atualizado 2016-10-18 · CVE-2002-0107

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CacheFlow CacheOS versions 4.0.13 and earlier

Description The web administration interface in CacheFlow CacheOS allows remote attackers to obtain sensitive information via a series of GET requests that do not end with 'HTTP/1.0' or another version string. This causes the information to be leaked in the error message.

Recommendations For CacheFlow CacheOS versions 4.0.13 and earlier, consider restricting access to the web administration interface until a fix is available. As a temporary workaround, ensure that all GET requests to the interface include a valid HTTP version string to prevent information leakage.

Exploit

Correção

Identificadores relacionados

CVE-2002-0107

Produtos afetados

Cacheflow Cacheos

Referências · 6

• 🔥 http://securityfocus.com/bid/3841 · Exploit
• 🔥 https://exploit-db.com/exploits/21212 · Exploit
• 🔥 http://online.securityfocus.com/archive/1/254167 · Exploit
• http://iss.net/security_center/static/7835.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0107 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101052887431488&w=2 · Nota