PT-2003-2401 · Album.Pl · Album.Pl

Aresu · Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1456

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Album.pl version 6.1

Description The issue allows remote attackers to execute arbitrary commands when an alternative configuration file is used. The exact attack vectors are not specified.

Recommendations For Album.pl version 6.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2003-1456

Produtos afetados

Album.Pl

Referências · 7

• 🔥 https://exploit-db.com/exploits/22545 · Exploit
• http://securityreason.com/securityalert/3270 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11878 · Nota
• http://securityfocus.com/archive/1/319763 · Correção
• http://perl.bobbitt.ca/yabbse/index.php?board=2%3Baction=display%3Bthreadid=720 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1456 · Nota de Segurança
• http://securityfocus.com/bid/7444 · Nota