PT-2002-1293 · Etype · Etype Eserv

Publicado 2002-05-03 · Atualizado 2008-09-11 · CVE-2002-0222

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Etype Eserv version 2.97

Description The issue allows remote attackers to redirect traffic to other sites via the PORT command, which is also known as an FTP bounce attack.

Recommendations For Etype Eserv version 2.97, consider restricting access to the PORT command as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2002-0222

Produtos afetados

Etype Eserv

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0222 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0222 · Nota
• http://securityfocus.com/bid/3986 · Nota
• http://iss.net/security_center/static/8021.php · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/252944 · Aviso do Fabricante