PT-2005-2866 · Software602 · 602Lan Suite

Publicado 2005-06-08 · Atualizado 2008-09-05 · CVE-2005-1909

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions 602LAN SUITE version 2004

Description The issue allows remote attackers to make it more difficult for the administrator to read portions of log files via a "<!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability.

Recommendations For 602LAN SUITE version 2004, as a temporary workaround, consider restricting access to the logon feature until a patch is available. Avoid using the HTTP GET request in the logon feature with the "<!-" sequence until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-1909

Produtos afetados

602Lan Suite

Referências · 3

• 🔥 http://rgod.altervista.org/602_en.html · Exploit
• 🔥 http://securitytracker.com/id?1014105 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1909 · Nota de Segurança