PT-2002-2834 · Artekopia · Netjuke

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-2114

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Artekopia Netjuke versions prior to 1.0 b7

Description: The issue allows remote attackers to execute arbitrary code on the web server. This is possibly achieved via the section parameter, which is passed to an eval() call.

Recommendations: For versions prior to 1.0 b7, update to version 1.0 b7 or later to resolve the issue. As a temporary workaround, consider restricting access to the section parameter to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-2114

Affected Products

Netjuke

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-2114 · Security Note
• http://sourceforge.net/tracker/index.php?func=detail&aid=507312&group_id=42076&atid=432052 · Patch
• http://securityfocus.com/bid/3988 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2114 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8101 · Note