PT-2004-3098 · Ansel · Ansel

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2203

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ansel versions 1.2 through 2.0

Description The issue allows remote attackers to gain access to web readable directories due to insecure default permissions.

Recommendations For versions 1.2 through 2.0, update the permissions to secure settings to prevent unauthorized access.

Fix

Related Identifiers

CVE-2004-2203

Affected Products

Ansel

References · 5

• http://osvdb.org/10898 · Patch
• http://securityfocus.com/bid/11420 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2203 · Security Note
• http://securitytracker.com/id?1011775 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17767 · Note