PT-2001-1157 · 24Link · 24Link

Published 2001-01-09 · Updated 2008-09-05 · CVE-2000-1118

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 24Link version 1.06

Description The issue allows remote attackers to bypass access restrictions. This can be achieved by prepending specific strings, such as /+/ or /. , to the HTTP GET request.

Recommendations For version 1.06, consider restricting access to sensitive areas of the web server to minimize the risk of exploitation. As a temporary workaround, avoid using HTTP GET requests that could be manipulated by adding /+/ or /. to the request until a patch is available.

Fix

Related Identifiers

CVE-2000-1118

Affected Products

24Link

References · 2

• http://archives.neohapsis.com/archives/bugtraq/2000-11/0369.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1118 · Security Note