PT-2003-2280 · Kai Blankenhorn Bitfolge · Snif

Publicado 2003-12-31 · Atualizado 2010-06-23 · CVE-2003-1335

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kai Blankenhorn Bitfolge simple and nice index file (aka snif) versions prior to 1.2.5

Description The issue allows remote attackers to download files from locations above the snif directory due to a directory traversal vulnerability.

Recommendations For versions prior to 1.2.5, update to version 1.2.5 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2003-1335

Produtos afetados

Snif

Referências · 2

• http://bitfolge.de/snif-en.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1335 · Nota de Segurança