PT-2002-1740 · Microsoft · Content Management Server

Publicado 2002-08-12 · Atualizado 2018-10-12 · CVE-2002-0718

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Content Management Server (MCMS) 2001

Description The issue concerns a web authoring command that allows attackers to authenticate and upload executable content by modifying the upload location. This could potentially lead to program execution via the MCMS authoring function.

Recommendations For Microsoft Content Management Server (MCMS) 2001, consider restricting access to the web authoring command to minimize the risk of exploitation. As a temporary workaround, limit the ability to modify the upload location for executable content until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-0718

Produtos afetados

Content Management Server

Referências · 4

• http://iss.net/security_center/static/9784.php · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0718 · Nota de Segurança
• http://securityfocus.com/bid/5421 · Nota