PT-2002-1733 · Unknown · Sendform.Cgi

Published 2002-08-12 · Updated 2016-10-18 · CVE-2002-0710

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions sendform.cgi versions 1.44 and earlier

Description A directory traversal issue allows remote attackers to read arbitrary files by specifying the desired files in the BlurbFilePath parameter.

Recommendations For versions 1.44 and earlier, consider restricting access to the sendform.cgi script until a patch is available. As a temporary workaround, avoid using the BlurbFilePath parameter in the affected script to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0710

Affected Products

Sendform.Cgi

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2002-0710 · Security Note
• http://scn.org/~bb615/scripts/sendform.html · Vendor Advisory
• http://marc.info/?l=bugtraq&m=102809084218422&w=2 · Note
• http://securityfocus.com/bid/5286 · Note
• http://osvdb.org/3568 · Note
• http://iss.net/security_center/static/9725.php · Note