PT-2002-1220 · Avirt · Avirt Gateway Suite

Publicado 2002-03-15 · Atualizado 2016-10-18 · CVE-2002-0134

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Avirt Gateway Suite version 4.2

Description The issue concerns the Telnet proxy in Avirt Gateway Suite, which does not require authentication for connecting to the proxy system. This allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.

Recommendations For Avirt Gateway Suite version 4.2, consider implementing authentication for the Telnet proxy to prevent unauthorized access. As a temporary workaround, restrict access to the Telnet proxy until a proper fix is applied.

Correção

Identificadores relacionados

CVE-2002-0134

Produtos afetados

Avirt Gateway Suite

Referências · 5

• http://marc.info/?l=bugtraq&m=101131669102843&w=2 · Nota
• http://marc.info/?l=bugtraq&m=101424723728817&w=2 · Nota
• http://iss.net/security_center/static/7915.php · Aviso do Fabricante
• http://securityfocus.com/bid/3901 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0134 · Nota de Segurança