PT-2003-1274 · Badblue · Badblue

Publicado 2003-03-31 · Atualizado 2008-09-05 · CVE-2002-1541

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BadBlue version 1.7

Description The issue allows remote attackers to bypass password protections for directories and files by sending an HTTP request with an extra / (slash).

Recommendations For BadBlue version 1.7, consider restricting access to sensitive directories and files as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2002-1541

Produtos afetados

Badblue

Referências · 5

• http://securityfocus.com/bid/6044 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0041.html · Aviso do Fabricante
• http://iss.net/security_center/static/10466.php · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1541 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1541 · Nota de Segurança