PT-2000-1820 · Ergo · Browsegate

Published 2000-12-19 · Updated 2017-10-10 · CVE-2000-0908

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BrowseGate version 2.80

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.

Recommendations For BrowseGate version 2.80, consider restricting the length of Authorization and Referer headers in HTTP requests to prevent potential exploitation. Additionally, as a temporary workaround, restrict access to sensitive areas of the server to minimize the risk of arbitrary command execution until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2000-0908

Affected Products

Browsegate

References · 7

• 🔥 https://exploit-db.com/exploits/20233 · Exploit
• http://securityfocus.com/bid/1702 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0908 · Security Note
• http://netcplus.com/browsegate.htm#BGLatest · Note
• http://archives.neohapsis.com/archives/win2ksecadvice/2000-q3/0128.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5270 · Note
• http://marc.info/?l=bugtraq&m=96956211605302&w=2 · Note