PT-2002-1661 · Dnstools · Dnstools

Publicado 2002-06-18 · Atualizado 2008-09-05 · CVE-2002-0613

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions DNSTools versions 2.0 beta 4 and earlier

Description The issue allows remote attackers to bypass authentication and gain privileges. This can be achieved by setting the user logged in or user dnstools administrator parameters.

Recommendations For versions 2.0 beta 4 and earlier, consider disabling the authentication mechanism in dnstools.php until a patch is available. Restrict access to the dnstools.php file to minimize the risk of exploitation. Avoid using the user logged in and user dnstools administrator parameters in the affected API endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2002-0613

Produtos afetados

Dnstools

Referências · 6

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-04/0390.html · Exploit
• 🔥 http://securityfocus.com/bid/4617 · Exploit
• 🔥 https://exploit-db.com/exploits/21425 · Exploit
• http://dnstools.com/dnstools_2.0.1.tar.gz · Nota
• http://iss.net/security_center/static/8948.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0613 · Nota de Segurança