PT-2003-2408 · Alt N Technologies · Webadmin

David A. Perez · Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1463

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Alt-N Technologies WebAdmin versions 2.0.0 through 2.0.2

Description The issue allows remote attackers with administrator privileges to determine the installation path by reading the contents of the Name parameter in a link and read arbitrary files via an absolute path in the Name parameter.

Recommendations For versions 2.0.0 through 2.0.2, consider restricting access to the Name parameter to prevent absolute path traversal until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2003-1463

Affected Products

Webadmin

References · 9

• 🔥 https://exploit-db.com/exploits/22542 · Exploit
• 🔥 https://exploit-db.com/exploits/22541 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1463 · Security Note
• http://securityfocus.com/bid/7438 · Note
• http://securityfocus.com/bid/7439 · Note
• http://securityreason.com/securityalert/3286 · Note
• http://securityfocus.com/archive/1/319735 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11875 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11874 · Note