PT-2003-2081 · Whale Communications · E-Gap

Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-1127

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Whale Communications e-Gap version 2.5

Description The issue allows remote attackers to obtain the source code for the login page via the HTTP TRACE method, which bypasses the preprocessor. This can be exploited by sending a request to the vulnerable API endpoint, such as "/login", using the HTTP TRACE method.

Recommendations For Whale Communications e-Gap version 2.5, consider disabling the HTTP TRACE method to prevent exploitation until a patch is available. Restrict access to sensitive pages, such as the login page, to minimize the risk of source code disclosure.

Exploit

Fix

Related Identifiers

CVE-2003-1127

Affected Products

E-Gap

References · 5

• 🔥 http://securityfocus.com/bid/9431 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1127 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14869 · Note
• http://procheckup.com/security_info/vuln_pr0307.html · Note
• http://kb.cert.org/vuls/id/371470 · Note