PT-2000-1343 · Pdgsoft · Pdgsoft Shopping Cart

Published 2000-05-01 · Updated 2016-10-18 · CVE-2000-0401

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PDGSoft shopping cart (affected versions not specified)

Description The issue concerns buffer overflows in the redirect.exe and changepw.exe components. Remote attackers can exploit this to execute arbitrary commands by sending a long query string.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2000-0401

Affected Products

Pdgsoft Shopping Cart

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2000-0401 · Security Note
• http://pdgsoft.com/Security/security2.html · Note
• http://marc.info/?l=bugtraq&m=95928319715983&w=2 · Note
• http://marc.info/?l=ntbugtraq&m=95928667119963&w=2 · Note
• http://securityfocus.com/bid/1256 · Note