PT-2002-3087 · Stalker · Communigate Pro

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2375

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CommuniGate Pro versions prior to 4.0b4

Description A directory traversal issue allows remote attackers to list the contents of the WebUser directory and its parent directory by using a (1) .. (dot dot) or (2) . (dot) in a URL. This could potentially reveal directory structure information or be used to infer product version information, although the extent of the information revealed is unclear.

Recommendations For CommuniGate Pro versions prior to 4.0b4, consider restricting access to the WebUser directory to minimize the risk of exploitation until a fix is available.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2002-2375

Affected Products

Communigate Pro

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-2375 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2375 · Note
• http://iss.net/security_center/static/9463.php · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-07/0016.html · Note