PT-2002-1345 · Falcon · Falcon Web Server

Published 2002-05-31 · Updated 2017-10-10 · CVE-2002-0275

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Falcon web server versions 2.0.0.1020 and earlier

Description The issue allows remote attackers to bypass authentication and read restricted files by including an extra / (slash) in the requested URL.

Recommendations For Falcon web server versions 2.0.0.1020 and earlier, update to a version later than 2.0.0.1020 to resolve the issue.

Fix

Related Identifiers

CVE-2002-0275

Affected Products

Falcon Web Server

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-0275 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8189 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0082.html · Note
• http://marc.info/?l=bugtraq&m=102253858809370&w=2 · Note
• http://marc.info/?l=bugtraq&m=101363946626951&w=2 · Note
• http://securityfocus.com/bid/4099 · Note