PT-2002-1797 · Hosting Controller · Hosting Controller

Publicado 2002-08-12 · Atualizado 2008-09-05 · CVE-2002-0776

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Hosting Controller version 2002

Description: The issue allows remote attackers to change the passwords of arbitrary users and gain privileges by modifying the username parameter in the "getuserdesc.asp" file.

Recommendations: For Hosting Controller version 2002, apply the "UpdateUser" hot fix to resolve the issue. As a temporary workaround, consider restricting access to the "getuserdesc.asp" file to minimize the risk of exploitation. Avoid using the username parameter in the affected file until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2002-0776

Produtos afetados

Hosting Controller

Referências · 5

• 🔥 http://online.securityfocus.com/archive/1/282129 · Exploit
• http://hostingcontroller.com/english/logs/sp2log.html · Aviso do Fabricante
• http://iss.net/security_center/static/9554.php · Nota
• http://securityfocus.com/bid/5229 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0776 · Nota de Segurança