PT-2002-1178 · Cider · Cider Shadow

Published 2002-03-07 · Updated 2008-09-05 · CVE-2002-0091

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CIDER SHADOW versions 1.5 through 1.6

Description The issue allows remote attackers to execute arbitrary commands via certain form fields in multiple CGI scripts.

Recommendations For CIDER SHADOW versions 1.5 through 1.6, consider restricting access to the vulnerable CGI scripts until a patch is available.

Fix

Related Identifiers

CVE-2002-0091

Affected Products

Cider Shadow

References · 5

• http://esecurityonline.com/advisories/eSO2408.asp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0091 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0400.html · Note
• http://securityfocus.com/bid/4625 · Note
• http://iss.net/security_center/static/8953.php · Note