PT-2004-2421 · 04Webserver · 04Webserver

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1513

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions 04WebServer version 1.42

Description The issue is related to inadequate filtering of data written to log files, potentially allowing remote attackers to inject carriage return characters into the log file and spoof log entries.

Recommendations For version 1.42, consider implementing proper input validation and filtering to prevent the injection of malicious characters into log files. As a temporary workaround, restrict access to the log files to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2004-1513

Produtos afetados

04Webserver

Referências · 8

• 🔥 http://securityfocus.com/bid/11652 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1513 · Nota de Segurança
• http://security.org.sg/vuln/04webserver142.html · Aviso do Fabricante
• http://secunia.com/advisories/13159 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=110012542615484&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18034 · Nota
• http://soft3304.net/04WebServer/Security.html · Nota
• http://marc.info/?l=bugtraq&m=110054395311823&w=2 · Nota