PT-2004-2480 · Aj Fork · Aj-Fork

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1572

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AJ-Fork version 167

Description The issue allows remote attackers to list files in certain directories, such as data, inc, plugins, skins, or tools, via a direct HTTP request, because access to these directories is not restricted.

Recommendations For AJ-Fork version 167, restrict access to the directories data, inc, plugins, skins, and tools to prevent remote attackers from listing files in those directories via a direct HTTP request.

Correção

Identificadores relacionados

CVE-2004-1572

Produtos afetados

Aj-Fork

Referências · 6

• http://securitytracker.com/id?1011484 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17569 · Nota
• http://marc.info/?l=bugtraq&m=109664986210763&w=2 · Nota
• http://securityfocus.com/bid/11301 · Nota
• http://echo.or.id/adv/adv07-y3dips-2004.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1572 · Nota de Segurança