PT-2002-2707 · Perception · Perception Liteserve

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1986

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Perception LiteServe versions 2.0 through 2.0.1

Description The issue allows remote attackers to obtain the source code of CGI scripts via an HTTP request with a trailing dot (".").

Recommendations For Perception LiteServe versions 2.0 through 2.0.1, update to a version that fixes this issue to prevent remote attackers from obtaining the source code of CGI scripts.

Exploit

Fix

Related Identifiers

CVE-2002-1986

Affected Products

Perception Liteserve

References · 5

• 🔥 http://securityfocus.com/bid/6188 · Exploit
• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0074.html · Exploit
• 🔥 https://exploit-db.com/exploits/22020 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1986 · Security Note
• http://iss.net/security_center/static/10635.php · Patch