PT-2002-2888 · Phpsquidpass · Phpsquidpass

Publicado 2002-12-31 · Atualizado 2016-10-18 · CVE-2002-2175

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: phpSquidPass versions prior to 0.2

Description: The issue allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username, due to an incomplete regular expression used to find a matching username in the database.

Recommendations: For versions prior to 0.2, update to version 0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the username management functionality to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-2175

Produtos afetados

Phpsquidpass

Referências · 5

• http://iss.net/security_center/static/9417.php · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=102508071021631&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2175 · Nota de Segurança
• http://securityfocus.com/bid/5090 · Aviso do Fabricante
• http://sourceforge.net/forum/forum.php?forum_id=188359 · Aviso do Fabricante