PT-2002-1345 · Falcon · Falcon Web Server

Publicado 2002-05-31 · Atualizado 2017-10-10 · CVE-2002-0275

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Falcon web server versions 2.0.0.1020 and earlier

Description The issue allows remote attackers to bypass authentication and read restricted files by including an extra / (slash) in the requested URL.

Recommendations For Falcon web server versions 2.0.0.1020 and earlier, update to a version later than 2.0.0.1020 to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-0275

Produtos afetados

Falcon Web Server

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/8189 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0275 · Nota de Segurança
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0082.html · Nota
• http://marc.info/?l=bugtraq&m=102253858809370&w=2 · Nota
• http://marc.info/?l=bugtraq&m=101363946626951&w=2 · Nota
• http://securityfocus.com/bid/4099 · Nota