PT-2001-2475 · Namazu · Namazu

Published 2001-12-27 · Updated 2017-10-10 · CVE-2001-1352

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Namazu versions 2.0.9 and earlier

Description A cross-site scripting issue allows remote attackers to execute arbitrary Javascript as other web users. This is achieved via an error message returned when an invalid index file is specified in the idxname parameter.

Recommendations For Namazu versions 2.0.9 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1352

Affected Products

Namazu

References · 7

• http://marc.info/?l=bugtraq&m=101060476404565&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1352 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7875 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1352 · Note
• http://osvdb.org/5691 · Note
• http://marc.info/?l=bugtraq&m=100947261916155&w=2 · Note
• http://marc.info/?l=bugtraq&m=101068116016472&w=2 · Note