PT-2002-2025 · Adobe · Contentserv

Published 2002-08-31 · Updated 2016-10-18 · CVE-2002-1019

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Adobe Content Server version 3.0

Description: A remote attacker can exploit the library feature to check out an eBook for an arbitrary length of time. This is achieved by modifying the loanMin parameter in the "download.asp" API endpoint.

Recommendations: For Adobe Content Server version 3.0, consider restricting access to the download.asp endpoint until a fix is available, or apply configuration changes to limit the impact of the modified loanMin parameter.

Fix

Related Identifiers

CVE-2002-1019

Affected Products

Contentserv

References · 4

• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1019 · Security Note
• http://marc.info/?l=vuln-dev&m=102650064028760&w=2 · Note
• http://marc.info/?l=vuln-dev&m=102649215618643&w=2 · Note