PT-2002-2026 · Adobe · Contentserv

Publicado 2002-08-31 · Atualizado 2016-10-18 · CVE-2002-1020

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Adobe Content Server version 3.0

Description: The library feature in Adobe Content Server allows a remote attacker to bypass the maximum number of loans for an eBook. This can be achieved by accessing the "Add to bookbag" feature when the server indicates that no more copies are available.

Recommendations: For Adobe Content Server version 3.0, consider restricting access to the "Add to bookbag" feature until a fix is available to prevent exploitation of this issue.

Correção

Identificadores relacionados

CVE-2002-1020

Produtos afetados

Contentserv

Referências · 4

• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html · Aviso do Fabricante
• http://marc.info/?l=vuln-dev&m=102650064028760&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1020 · Nota de Segurança
• http://marc.info/?l=vuln-dev&m=102649215618643&w=2 · Nota