PT-2007-4693 · Webapp · Webapp

Publicado 2007-06-26 · Atualizado 2008-11-15 · CVE-2007-3422

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebAPP versions prior to 0.9.9.7

Description The issue concerns the getcgi function in cgi-bin/cgi-lib/subs.pl, which attempts to parse query strings containing non-printing characters, certain uncommon printing characters in URLs, or invalid URL encoding sequences. This has an unknown impact and can be exploited remotely.

Recommendations For versions prior to 0.9.9.7, update to version 0.9.9.7 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-3422

Produtos afetados

Webapp

Referências · 4

• http://web-app.org/cgi-bin/index.cgi?action=forum&board=how_to&op=display&num=9458 · Nota
• http://web-app.org/downloads/WebAPPv0.9.9.7.zip · Correção
• http://osvdb.org/45408 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3422 · Nota de Segurança