PT-2002-2778 · Teekai · Teekai Forum

Publicado 2002-12-31 · Atualizado 2016-10-18 · CVE-2002-2057

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TeeKai Forum version 1.2

Description The issue concerns the weak encryption of web usage statistics stored in the data/member log.txt file. This file is located under the web document root with insufficient access control, allowing remote attackers to access it. By exploiting this, attackers can identify the IP addresses of visitors to the site. The encryption method used involves dividing each octet of the IP address by the MD5 hash of the string '20'.

Recommendations For TeeKai Forum version 1.2, consider restricting access to the data/member log.txt file to minimize the risk of exploitation. As a temporary workaround, limit the information stored in this file or implement proper access controls to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2002-2057

Produtos afetados

Teekai Forum

Referências · 5

• 🔥 http://securityfocus.com/bid/4926 · Exploit
• 🔥 http://ifrance.com/kitetoua/tuto/Teekai.txt · Exploit
• http://marc.info/?l=vuln-dev&m=102313697923798&w=2 · Nota
• http://iss.net/security_center/static/9286.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2057 · Nota de Segurança