PT-2002-1274 · Oracle · Tarantella Enterprise

Published 2002-05-03 · Updated 2024-02-14 · CVE-2002-0203

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Tarantella Enterprise versions 3.0x through 3.20 Tarantella Enterprise version 3.11.903

Description The issue allows remote attackers to view directory contents. This is achieved by providing an empty pg parameter in the ttawebtop.cgi script.

Recommendations For Tarantella Enterprise versions 3.0x through 3.20, avoid using the ttawebtop.cgi script with an empty pg parameter until a fix is available. For Tarantella Enterprise version 3.11.903, consider restricting access to the ttawebtop.cgi script to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0203

Affected Products

Tarantella Enterprise

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2002-0203 · Security Note
• http://tarantella.com/security/bulletin-03.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=101190195430376&w=2 · Note