PT-2002-2181 · Isc · Ypxfrd

Published 2002-10-28 · Updated 2018-10-30 · CVE-2002-1199

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: ypxfrd (affected versions not specified)

Description: The issue allows local users to read arbitrary files and remote attackers to read databases outside the intended directory via a directory traversal and symlink attack on the domain and map arguments.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1199

Affected Products

Ypxfrd

References · 8

• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/47903 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1199 · Security Note
• ftp://ftp.caldera.com/pub/updates/OpenServer/CSSA-2002-SCO.40 · Vendor Advisory
• http://kb.cert.org/vuls/id/538033 · Note
• http://marc.info/?l=bugtraq&m=103426842025029&w=2 · Note
• http://securityfocus.com/bid/5937 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2423 · Note
• http://iss.net/security_center/static/10329.php · Note