PT-2002-2576 · Rlaj · Rlaj Whois Cgi Script

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1854

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rlaj whois CGI script (whois.cgi) version 1.0

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field. This can be done by injecting malicious input into the field, potentially leading to unauthorized access and control.

Recommendations For version 1.0, consider restricting access to the whois.cgi script until a patch is available, or apply input validation to prevent shell metacharacter injection in the domain name field.

Correção

Identificadores relacionados

CVE-2002-1854

Produtos afetados

Rlaj Whois Cgi Script

Referências · 4

• http://iss.net/security_center/static/9439.php · Nota
• http://online.securityfocus.com/archive/1/279268 · Nota
• http://securityfocus.com/bid/5113 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1854 · Nota de Segurança