PT-2002-1293 · Etype · Etype Eserv

Published 2002-05-03 · Updated 2008-09-11 · CVE-2002-0222

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Etype Eserv version 2.97

Description The issue allows remote attackers to redirect traffic to other sites via the PORT command, which is also known as an FTP bounce attack.

Recommendations For Etype Eserv version 2.97, consider restricting access to the PORT command as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2002-0222

Affected Products

Etype Eserv

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0222 · Security Note
• http://iss.net/security_center/static/8021.php · Vendor Advisory
• http://online.securityfocus.com/archive/1/252944 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0222 · Note
• http://securityfocus.com/bid/3986 · Note