PT-2003-1261 · Mondosearch · Mondosearch+1

Publicado 2003-04-02 · Atualizado 2008-09-05 · CVE-2002-1528

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MondoSearch version 4.4

Description The issue allows remote attackers to obtain the source code of scripts. This is achieved via the mask parameter.

Recommendations For MondoSearch version 4.4, avoid using the mask parameter in the MsmMask.exe until a fix is available. As a temporary workaround, consider restricting access to the MsmMask.exe to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-1528

Produtos afetados

Mondosearch

Msmmask.Exe

Referências · 4

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-10/0147.html · Exploit
• http://securityfocus.com/bid/5941 · Aviso do Fabricante
• http://iss.net/security_center/static/10350.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1528 · Nota de Segurança