PT-2002-2181 · Isc · Ypxfrd

Publicado 2002-10-28 · Atualizado 2018-10-30 · CVE-2002-1199

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: ypxfrd (affected versions not specified)

Description: The issue allows local users to read arbitrary files and remote attackers to read databases outside the intended directory via a directory traversal and symlink attack on the domain and map arguments.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2002-1199

Produtos afetados

Ypxfrd

Referências · 8

• http://kb.cert.org/vuls/id/538033 · Nota
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1199 · Nota de Segurança
• ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=103426842025029&w=2 · Nota
• http://securityfocus.com/bid/5937 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2423 · Nota
• http://iss.net/security_center/static/10329.php · Nota