PT-2002-1474 · Puretls · Puretls

Publicado 2002-06-11 · Atualizado 2008-09-05 · CVE-2002-0420

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PureTLS versions prior to 0.9b2

Description The issue is related to injection attacks, which could allow remote attackers to corrupt or hijack user sessions.

Recommendations For versions prior to 0.9b2, update to version 0.9b2 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2002-0420

Produtos afetados

Puretls

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0420 · Nota de Segurança
• http://securityfocus.com/bid/4237 · Aviso do Fabricante
• http://iss.net/security_center/static/8386.php · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2002-03/0056.html · Nota