PT-2002-1286 · Agora · Agora.Cgi

Published 2002-05-03 · Updated 2008-09-11 · CVE-2002-0215

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Agora.cgi versions 3.2r through 4.0

Description The issue allows remote attackers to determine the full pathname of the agora.cgi file by requesting a non-existent .html file, which leaks the pathname in an error message when the software is in debug mode.

Recommendations For Agora.cgi versions 3.2r through 4.0, consider disabling debug mode to prevent the leakage of the pathname.

Exploit

Fix

Related Identifiers

CVE-2002-0215

Affected Products

Agora.Cgi

References · 5

• 🔥 https://exploit-db.com/exploits/21249 · Exploit
• http://online.securityfocus.com/archive/1/252761 · Vendor Advisory
• http://iss.net/security_center/static/8011.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0215 · Security Note
• http://securityfocus.com/bid/3976 · Note