PT-2000-1773 · Netegrity · Netegrity Siteminder

Published 2000-11-14 · Updated 2017-10-10 · CVE-2000-0850

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netegrity SiteMinder versions prior to 4.11

Description The issue allows remote attackers to bypass the authentication mechanism. This can be achieved by appending "$/FILENAME.ext" (where ext is .ccc, .class, or .jpg) to the requested URL.

Recommendations For versions prior to 4.11, update to version 4.11 or later to resolve the issue.

Fix

Related Identifiers

CVE-2000-0850

Affected Products

Netegrity Siteminder

References · 4

• http://securityfocus.com/bid/1681 · Vendor Advisory
• http://atstake.com/research/advisories/2000/a091100-1.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0850 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5230 · Note