PT-2002-1985 · Microsoft · File Transfer Manager

Publicado

2002-08-23

·

Atualizado

2008-09-10

·

CVE-2002-0978

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Microsoft File Transfer Manager (FTM) versions prior to 4.0
Description: The issue allows remote attackers to upload or download arbitrary files to arbitrary locations via a man-in-the-middle attack. This is achieved by modifying the TGT and TGN parameters in a call to the Persist function.
Recommendations: For versions prior to 4.0, update to version 4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Persist function to minimize the risk of exploitation. Avoid using the TGT and TGN parameters in the affected API endpoint until the issue is resolved.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2002-0978

Produtos afetados

File Transfer Manager