PT-2001-2473 · Namazu · Namazu

Published 2001-11-25 · Updated 2016-10-18 · CVE-2001-1350

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Namazu versions 2.0.7 and earlier

Description The issue allows remote attackers to execute arbitrary Javascript as other web users. This is achieved via the lang parameter in the namazu.cgi script.

Recommendations For Namazu versions 2.0.7 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2001-1350

Affected Products

Namazu

References · 4

• http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1350 · Security Note
• http://search.namazu.org/ml/namazu-devel-ja/msg02114.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1350 · Note