PT-2002-1469 · Realnetworks · Realplayer

Publicado 2002-06-11 · Atualizado 2008-09-05 · CVE-2002-0415

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions RealPlayer version 6.0.7

Description A directory traversal issue in the web server used by RealPlayer may allow local users to read files accessible to RealPlayer by using a .. (dot dot) in an HTTP GET request to port 1275.

Recommendations For RealPlayer version 6.0.7, consider restricting access to the web server or disabling it until a fix is available. Avoid using the .. (dot dot) notation in HTTP GET requests to port 1275 to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2002-0415

Produtos afetados

Realplayer

Referências · 4

• http://securityfocus.com/archive/1/259333 · Aviso do Fabricante
• http://iss.net/security_center/static/8336.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0415 · Nota de Segurança
• http://securityfocus.com/bid/4221 · Aviso do Fabricante