PT-2002-1542 · Alguest · Alguest

Publicado 2002-06-11 · Atualizado 2008-09-05 · CVE-2002-0491

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions AlGuest version 1.0

Description The issue allows remote attackers to bypass authentication and gain privileges by setting the admin cookie to an arbitrary value. This is due to the admin.php file in AlGuest checking for the existence of the admin cookie to authenticate the administrator.

Recommendations For AlGuest version 1.0, consider disabling the admin.php file or restricting access to it until a proper authentication mechanism is implemented to prevent arbitrary admin cookie values from being set.

Exploit

Correção

Identificadores relacionados

CVE-2002-0491

Produtos afetados

Alguest

Referências · 4

• 🔥 http://securityfocus.com/bid/4355 · Exploit
• http://iss.net/security_center/static/8623.php · Aviso do Fabricante
• http://securityfocus.com/archive/1/263902 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0491 · Nota de Segurança