PT-2002-1733 · Unknown · Sendform.Cgi

Publicado 2002-08-12 · Atualizado 2016-10-18 · CVE-2002-0710

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions sendform.cgi versions 1.44 and earlier

Description A directory traversal issue allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter.

Recommendations For versions 1.44 and earlier, consider restricting access to the sendform.cgi script until a patch is available. As a temporary workaround, avoid using the BlurbFilePath parameter in the affected script to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-0710

Produtos afetados

Sendform.Cgi

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-0710 · Nota de Segurança
• http://scn.org/~bb615/scripts/sendform.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=102809084218422&w=2 · Nota
• http://securityfocus.com/bid/5286 · Nota
• http://osvdb.org/3568 · Nota
• http://iss.net/security_center/static/9725.php · Nota