PT-2002-1540 · Linux · Linux Directory Penguin Nslookup Cgi Script

Publicado 2002-06-11 · Atualizado 2016-10-18 · CVE-2002-0489

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Directory Penguin NsLookup CGI script version 1.0

Description The issue allows remote attackers to execute arbitrary code via shell metacharacters in the query or type parameters of the CGI script.

Recommendations For version 1.0, consider restricting access to the nslookup.pl script until a patch is available, and avoid using the query and type parameters in the CGI script until the issue is resolved.

Correção

Identificadores relacionados

CVE-2002-0489

Produtos afetados

Linux Directory Penguin Nslookup Cgi Script

Referências · 4

• http://securityfocus.com/bid/4353 · Aviso do Fabricante
• http://iss.net/security_center/static/8601.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0489 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=101684215209558&w=2 · Nota