PT-2002-2692 · Sourcecraft · Sourcecraft Networking Utils

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-1971

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sourcecraft Networking Utils version 1.0

Description The issue allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument. This is due to a problem in the ping utility in networking utils.php.

Recommendations For Sourcecraft Networking Utils version 1.0, consider validating and sanitizing the Domain name and IP address arguments to prevent shell metacharacter injection. As a temporary workaround, restrict access to the ping utility until a proper fix is applied.

Exploit

Correção

Identificadores relacionados

CVE-2002-1971

Produtos afetados

Sourcecraft Networking Utils

Referências · 6

• 🔥 http://online.securityfocus.com/archive/1/298588 · Exploit
• 🔥 http://securitytracker.com/id?1005543 · Exploit
• http://iss.net/security_center/static/10541.php · Nota
• http://sourcecraft.org/index.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1971 · Nota de Segurança
• http://securityfocus.com/bid/6107 · Nota