PT-2002-2025 · Adobe · Contentserv

Publicado 2002-08-31 · Atualizado 2016-10-18 · CVE-2002-1019

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Adobe Content Server version 3.0

Description: A remote attacker can exploit the library feature to check out an eBook for an arbitrary length of time. This is achieved by modifying the loanMin parameter in the "download.asp" API endpoint.

Recommendations: For Adobe Content Server version 3.0, consider restricting access to the download.asp endpoint until a fix is available, or apply configuration changes to limit the impact of the modified loanMin parameter.

Correção

Identificadores relacionados

CVE-2002-1019

Produtos afetados

Contentserv

Referências · 4

• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html · Aviso do Fabricante
• http://marc.info/?l=vuln-dev&m=102650064028760&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1019 · Nota de Segurança
• http://marc.info/?l=vuln-dev&m=102649215618643&w=2 · Nota