PT-2002-3087 · Stalker · Communigate Pro

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2375

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CommuniGate Pro versions prior to 4.0b4

Description A directory traversal issue allows remote attackers to list the contents of the WebUser directory and its parent directory by using a (1) .. (dot dot) or (2) . (dot) in a URL. This could potentially reveal directory structure information or be used to infer product version information, although the extent of the information revealed is unclear.

Recommendations For CommuniGate Pro versions prior to 4.0b4, consider restricting access to the WebUser directory to minimize the risk of exploitation until a fix is available.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2002-2375

Produtos afetados

Communigate Pro

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2375 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2375 · Nota de Segurança
• http://iss.net/security_center/static/9463.php · Nota
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0016.html · Nota