PT-2001-2474 · Namazu · Namazu

Published 2001-12-25 · Updated 2017-10-10 · CVE-2001-1351

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Namazu versions 2.0.8 and earlier

Description The issue allows remote attackers to execute arbitrary Javascript as other web users. This is achieved via the index file name that is displayed when displaying hit numbers.

Recommendations For Namazu versions 2.0.8 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1351

Affected Products

Namazu

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-1351 · Security Note
• http://marc.info/?l=bugtraq&w=2&r=1&s=namazu&q=b · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1351 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7875 · Note
• http://osvdb.org/5690 · Note