PT-2002-2692 · Sourcecraft · Sourcecraft Networking Utils

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1971

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sourcecraft Networking Utils version 1.0

Description The issue allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP address argument. This is due to a problem in the ping utility in networking utils.php.

Recommendations For Sourcecraft Networking Utils version 1.0, consider validating and sanitizing the Domain name and IP address arguments to prevent shell metacharacter injection. As a temporary workaround, restrict access to the ping utility until a proper fix is applied.

Exploit

Fix

Related Identifiers

CVE-2002-1971

Affected Products

Sourcecraft Networking Utils

References · 6

• 🔥 http://online.securityfocus.com/archive/1/298588 · Exploit
• 🔥 http://securitytracker.com/id?1005543 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1971 · Security Note
• http://iss.net/security_center/static/10541.php · Note
• http://sourcecraft.org/index.php · Note
• http://securityfocus.com/bid/6107 · Note