PT-2002-1559 · Wwwisis · Wwwisis

Publicado 2002-06-11 · Atualizado 2008-09-05 · CVE-2002-0508

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions wwwisis versions 3.45 and earlier

Description The issue allows remote attackers to execute arbitrary commands and read files. This can be achieved via the parameters prolog or epilog.

Recommendations For versions 3.45 and earlier, consider restricting access to the prolog and epilog parameters to minimize the risk of exploitation. As a temporary workaround, avoid using these parameters until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2002-0508

Produtos afetados

Wwwisis

Referências · 8

• http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0077.html · Nota
• http://bireme.br/security.htm · Nota
• http://securityfocus.com/bid/4384 · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/265456 · Aviso do Fabricante
• http://online.securityfocus.com/archive/1/264682 · Aviso do Fabricante
• http://securityfocus.com/bid/4383 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0508 · Nota de Segurança
• http://iss.net/security_center/static/8660.php · Nota