PT-2002-1647 · Blahz · Blahz-Dns

Publicado 2002-06-18 · Atualizado 2008-09-05 · CVE-2002-0599

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Blahz-DNS versions 0.2 and earlier

Description The issue allows remote attackers to bypass authentication and modify configuration by directly requesting CGI programs, such as "dostuff.php", instead of going through the login screen.

Recommendations For Blahz-DNS versions 0.2 and earlier, consider restricting direct access to CGI programs like dostuff.php to prevent unauthorized configuration modifications.

Exploit

Correção

Identificadores relacionados

CVE-2002-0599

Produtos afetados

Blahz-Dns

Referências · 7

• 🔥 https://exploit-db.com/exploits/21426 · Exploit
• 🔥 http://securityfocus.com/bid/4618 · Exploit
• http://sourceforge.net/project/shownotes.php?release_id=87004 · Nota
• http://iss.net/security_center/static/8951.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0599 · Nota de Segurança
• http://osvdb.org/5178 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0395.html · Aviso do Fabricante