PT-2001-1980 · Oracle · Tarantella Enterprise

Published 2001-12-06 · Updated 2024-02-14 · CVE-2001-0805

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tarantella Enterprise versions 3.00 through 3.01

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by including a .. (dot dot) in the pg parameter of the ttawebtop.cgi endpoint.

Recommendations For versions 3.00 and 3.01, restrict access to the ttawebtop.cgi endpoint to minimize the risk of exploitation. Avoid using the pg parameter in the ttawebtop.cgi endpoint until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2001-0805

Affected Products

Tarantella Enterprise

References · 7

• 🔥 http://securityfocus.com/bid/2890 · Exploit
• 🔥 http://securityfocus.com/archive/1/[e-mail] · Exploit
• 🔥 https://exploit-db.com/exploits/20940 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0805 · Security Note
• http://securityfocus.com/archive/1/20010619150935.A5226%40tarantella.com · Note
• http://securityfocus.com/archive/1/3B2E37D0.81D9ED9D%40snosoft.com · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6723 · Note