PT-2001-1461 · News Desk · News Desk

Published 2001-03-09 · Updated 2008-09-05 · CVE-2001-0232

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions News Desk version 1.2

Description The issue allows remote attackers to read arbitrary files via shell metacharacters in the newsdesk.cgi component.

Recommendations For News Desk version 1.2, consider restricting access to the newsdesk.cgi component until a patch is available. As a temporary workaround, avoid using shell metacharacters in the newsdesk.cgi component to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2001-0232

Affected Products

News Desk

References · 2

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2001-01/0042.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0232 · Security Note