PT-2004-2713 · Vocaltec · Vocaltec Vgw4/8 Gateway

Rafel Ivgi + 1 · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1814

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VocalTec VGW4/8 Gateway version 8.0

Description A directory traversal issue allows remote attackers to read protected files by using .. (dot dot) sequences in an HTTP request. This has been demonstrated using the home.asp file.

Recommendations For VocalTec VGW4/8 Gateway version 8.0, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of HTTP requests that contain .. (dot dot) sequences.

Exploit

Correção

Identificadores relacionados

CVE-2004-1814

Produtos afetados

Vocaltec Vgw4/8 Gateway

Referências · 4

• 🔥 http://securityfocus.com/bid/9876 · Exploit
• http://marc.info/?l=bugtraq&m=107936739131657&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15476 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1814 · Nota de Segurança