PT-2002-1273 · Paintbbs · Paintbbs

Publicado 2002-05-03 · Atualizado 2008-09-11 · CVE-2002-0202

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PaintBBS version 1.2

Description The issue allows local users to obtain the encrypted server password via the world-readable oekakibbs.conf file or modify the server configuration via the world-writeable /oekaki/ folder due to insecure permissions of certain files and directories installed by PaintBBS.

Recommendations For PaintBBS version 1.2, consider changing the permissions of the oekakibbs.conf file to restrict read access and modify the permissions of the /oekaki/ folder to prevent write access by unauthorized users.

Correção

Identificadores relacionados

CVE-2002-0202

Produtos afetados

Paintbbs

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0202 · Nota de Segurança
• http://online.securityfocus.com/archive/1/251985 · Aviso do Fabricante
• http://securityfocus.com/bid/3948 · Nota
• http://iss.net/security_center/static/7982.php · Aviso do Fabricante