PT-2003-2408 · Alt N Technologies · Webadmin

David A. Perez · Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1463

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Alt-N Technologies WebAdmin versions 2.0.0 through 2.0.2

Description The issue allows remote attackers with administrator privileges to determine the installation path by reading the contents of the Name parameter in a link and read arbitrary files via an absolute path in the Name parameter.

Recommendations For versions 2.0.0 through 2.0.2, consider restricting access to the Name parameter to prevent absolute path traversal until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2003-1463

Produtos afetados

Webadmin

Referências · 9

• 🔥 https://exploit-db.com/exploits/22542 · Exploit
• 🔥 https://exploit-db.com/exploits/22541 · Exploit
• http://securityfocus.com/bid/7438 · Nota
• http://securityfocus.com/bid/7439 · Nota
• http://securityreason.com/securityalert/3286 · Nota
• http://securityfocus.com/archive/1/319735 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11875 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1463 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11874 · Nota