PT-2002-2775 · Teekai · Teekai Forum

Published 2002-12-31 · Updated 2016-10-18 · CVE-2002-2054

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TeeKai Forum version 1.2

Description The issue allows remote attackers to authenticate as the administrator and gain privileged web forum access. This is achieved by setting the valid level cookie to admin.

Recommendations For TeeKai Forum version 1.2, consider restricting access to the administrator panel until a patch is available. As a temporary workaround, avoid using the valid level cookie or restrict its modification to prevent unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2002-2054

Affected Products

Teekai Forum

References · 5

• 🔥 http://ifrance.com/kitetoua/tuto/Teekai.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2054 · Security Note
• http://marc.info/?l=vuln-dev&m=102313697923798&w=2 · Note
• http://iss.net/security_center/static/9285.php · Note
• http://securityfocus.com/bid/4925 · Note