PT-2002-2026 · Adobe · Contentserv

Published 2002-08-31 · Updated 2016-10-18 · CVE-2002-1020

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Adobe Content Server version 3.0

Description: The library feature in Adobe Content Server allows a remote attacker to bypass the maximum number of loans for an eBook. This can be achieved by accessing the "Add to bookbag" feature when the server indicates that no more copies are available.

Recommendations: For Adobe Content Server version 3.0, consider restricting access to the "Add to bookbag" feature until a fix is available to prevent exploitation of this issue.

Fix

Related Identifiers

CVE-2002-1020

Affected Products

Contentserv

References · 4

• http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0020.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1020 · Security Note
• http://marc.info/?l=vuln-dev&m=102650064028760&w=2 · Note
• http://marc.info/?l=vuln-dev&m=102649215618643&w=2 · Note