PT-2003-2405 · Unknown · Worker Filemanager

Publicado 2003-12-31 · Atualizado 2008-09-05 · CVE-2003-1460

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Worker Filemanager versions 1.0 through 2.7

Description The issue allows local users to obtain sensitive information due to the software setting permissions on the destination directory to world-readable and executable while copying data.

Recommendations For versions 1.0 through 2.7, consider changing the permissions on the destination directory to restrict access and prevent sensitive information disclosure until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2003-1460

Produtos afetados

Worker Filemanager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2003-1460 · Nota de Segurança
• http://securityfocus.com/bid/7460 · Correção
• http://boomerangsworld.de/worker/wchanges.php3?lang=en · Nota