PT-2002-2778 · Teekai · Teekai Forum

Published 2002-12-31 · Updated 2016-10-18 · CVE-2002-2057

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TeeKai Forum version 1.2

Description The issue concerns the weak encryption of web usage statistics stored in the data/member log.txt file. This file is located under the web document root with insufficient access control, allowing remote attackers to access it. By exploiting this, attackers can identify the IP addresses of visitors to the site. The encryption method used involves dividing each octet of the IP address by the MD5 hash of the string '20'.

Recommendations For TeeKai Forum version 1.2, consider restricting access to the data/member log.txt file to minimize the risk of exploitation. As a temporary workaround, limit the information stored in this file or implement proper access controls to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2002-2057

Affected Products

Teekai Forum

References · 5

• 🔥 http://securityfocus.com/bid/4926 · Exploit
• 🔥 http://ifrance.com/kitetoua/tuto/Teekai.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2057 · Security Note
• http://marc.info/?l=vuln-dev&m=102313697923798&w=2 · Note
• http://iss.net/security_center/static/9286.php · Note