PT-2003-1258 · Sun · Sun One Starter Kit

Publicado 2003-03-18 · Atualizado 2008-09-05 · CVE-2002-1525

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun ONE Starter Kit version 2.0

Description A directory traversal issue exists in the ASTAware SearchDisk engine, allowing remote attackers to read arbitrary files. This can be achieved through a .. (dot dot) attack on ports 6015 or 6016, or by using an absolute pathname to access port 6017.

Recommendations For Sun ONE Starter Kit version 2.0, restrict access to ports 6015, 6016, and 6017 to minimize the risk of exploitation. As a temporary workaround, consider disabling the ASTAware SearchDisk engine until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-1525

Produtos afetados

Sun One Starter Kit

Referências · 5

• 🔥 http://online.securityfocus.com/archive/1/293545 · Exploit
• 🔥 http://securityfocus.com/bid/5828 · Exploit
• 🔥 https://exploit-db.com/exploits/21879 · Exploit
• http://iss.net/security_center/static/10225.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1525 · Nota de Segurança