PT-2004-2480 · Aj Fork · Aj-Fork

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1572

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AJ-Fork version 167

Description The issue allows remote attackers to list files in certain directories, such as data, inc, plugins, skins, or tools, via a direct HTTP request, because access to these directories is not restricted.

Recommendations For AJ-Fork version 167, restrict access to the directories data, inc, plugins, skins, and tools to prevent remote attackers from listing files in those directories via a direct HTTP request.

Fix

Related Identifiers

CVE-2004-1572

Affected Products

Aj-Fork

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-1572 · Security Note
• http://securitytracker.com/id?1011484 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17569 · Note
• http://marc.info/?l=bugtraq&m=109664986210763&w=2 · Note
• http://securityfocus.com/bid/11301 · Note
• http://echo.or.id/adv/adv07-y3dips-2004.txt · Note