PT-2002-2834 · Artekopia · Netjuke

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-2114

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Artekopia Netjuke versions prior to 1.0 b7

Description: The issue allows remote attackers to execute arbitrary code on the web server. This is possibly achieved via the section parameter, which is passed to an eval() call.

Recommendations: For versions prior to 1.0 b7, update to version 1.0 b7 or later to resolve the issue. As a temporary workaround, consider restricting access to the section parameter to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-2114

Produtos afetados

Netjuke

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2114 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8101 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2114 · Nota de Segurança
• http://sourceforge.net/tracker/index.php?func=detail&aid=507312&group_id=42076&atid=432052 · Correção
• http://securityfocus.com/bid/3988 · Correção