PT-2002-1740 · Microsoft · Content Management Server

Published 2002-08-12 · Updated 2018-10-12 · CVE-2002-0718

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Content Management Server (MCMS) 2001

Description The issue concerns a web authoring command that allows attackers to authenticate and upload executable content by modifying the upload location. This could potentially lead to program execution via the MCMS authoring function.

Recommendations For Microsoft Content Management Server (MCMS) 2001, consider restricting access to the web authoring command to minimize the risk of exploitation. As a temporary workaround, limit the ability to modify the upload location for executable content until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0718

Affected Products

Content Management Server

References · 4

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-041 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0718 · Security Note
• http://iss.net/security_center/static/9784.php · Note
• http://securityfocus.com/bid/5421 · Note