PT-2002-1286 · Agora · Agora.Cgi

Publicado 2002-05-03 · Atualizado 2008-09-11 · CVE-2002-0215

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Agora.cgi versions 3.2r through 4.0

Description The issue allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message when the software is in debug mode.

Recommendations For Agora.cgi versions 3.2r through 4.0, consider disabling debug mode to prevent the leakage of the pathname.

Exploit

Correção

Identificadores relacionados

CVE-2002-0215

Produtos afetados

Agora.Cgi

Referências · 5

• 🔥 https://exploit-db.com/exploits/21249 · Exploit
• http://online.securityfocus.com/archive/1/252761 · Aviso do Fabricante
• http://iss.net/security_center/static/8011.php · Aviso do Fabricante
• http://securityfocus.com/bid/3976 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0215 · Nota de Segurança