PT-2002-3001 · Badblue · Badblue

Publicado 2002-12-31 · Atualizado 2017-07-29 · CVE-2002-2289

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: BadBlue version 1.7.1

Description: The issue allows remote attackers to gain sensitive information, including ODBC passwords, by calling the phpinfo function through the soinfo.php file.

Recommendations: For BadBlue version 1.7.1, consider disabling the phpinfo function call in the soinfo.php file to prevent information disclosure. Restrict access to the soinfo.php file to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2002-2289

Produtos afetados

Badblue

Referências · 7

• 🔥 http://online.securityfocus.com/archive/1/300992 · Exploit
• 🔥 http://securityreason.com/securityalert/3243 · Exploit
• 🔥 http://derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0329.html · Exploit
• http://securityfocus.com/bid/6243 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10690 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2289 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2289 · Nota de Segurança