PT-2002-1099 · Plesk · Plesk Server Administrator

Published 2002-03-15 · Updated 2008-09-05 · CVE-2001-1222

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Plesk Server Administrator (PSA) version 1.0

Description The issue allows remote attackers to obtain PHP source code via an HTTP request containing the target's IP address and a valid account name for the domain.

Recommendations For Plesk Server Administrator (PSA) version 1.0, consider restricting access to sensitive PHP files until a patch is available. As a temporary workaround, limit the exposure of account names and IP addresses to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1222

Affected Products

Plesk Server Administrator

References · 5

• http://securityfocus.com/archive/1/246861 · Vendor Advisory
• http://securityfocus.com/bid/3737 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1222 · Security Note
• http://iss.net/security_center/static/7735.php · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1222 · Note