PT-2001-2339 · Unknown · Last Lines

Published 2001-12-30 · Updated 2016-10-18 · CVE-2001-1205

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Last Lines version 2.0

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by utilizing '..' sequences in the error log variable.

Recommendations For Last Lines version 2.0, consider restricting access to the lastlines.cgi script until a patch is available, or avoid using the error log variable in a way that could facilitate directory traversal attacks.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2001-1205

Affected Products

Last Lines

References · 3

• http://securityfocus.com/bid/3754 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1205 · Security Note
• http://marc.info/?l=bugtraq&m=100975978324723&w=2 · Note