PT-2002-1559 · Wwwisis · Wwwisis

Published 2002-06-11 · Updated 2008-09-05 · CVE-2002-0508

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions wwwisis versions 3.45 and earlier

Description The issue allows remote attackers to execute arbitrary commands and read files. This can be achieved via the parameters prolog or epilog.

Recommendations For versions 3.45 and earlier, consider restricting access to the prolog and epilog parameters to minimize the risk of exploitation. As a temporary workaround, avoid using these parameters until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2002-0508

Affected Products

Wwwisis

References · 8

• http://securityfocus.com/bid/4384 · Vendor Advisory
• http://online.securityfocus.com/archive/1/265456 · Vendor Advisory
• http://online.securityfocus.com/archive/1/264682 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0508 · Security Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0077.html · Note
• http://bireme.br/security.htm · Note
• http://securityfocus.com/bid/4383 · Note
• http://iss.net/security_center/static/8660.php · Note