PT-2002-2303 · Ezupload · Eupload

Publicado 2002-07-31 · Atualizado 2008-09-10 · CVE-2002-1449

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eUpload version 1.0

Description The issue allows remote attackers to read a password file stored in plaintext under the web document root, which can then be used to overwrite arbitrary files.

Recommendations For eUpload version 1.0, consider restricting access to the password.txt file or storing it outside the web document root to prevent unauthorized access. As a temporary workaround, restrict write access to sensitive files and directories until a more secure password storage method is implemented.

Exploit

Correção

Identificadores relacionados

CVE-2002-1449

Produtos afetados

Eupload

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-07/0412.html · Exploit
• http://securityfocus.com/bid/5369 · Nota
• http://iss.net/security_center/static/9733.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1449 · Nota de Segurança