PT-2004-3711 · Fsp · Fsp

Published 1970-01-01 · Updated 2017-10-10 · CVE-2003-1022

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions fsp versions prior to 2.81.b18 fsp (affected versions not specified)

Description The issue allows remote users to access files outside the FSP root directory, potentially leading to confidentiality, integrity, and availability breaches of protected information. This can be exploited remotely.

Recommendations For versions prior to 2.81.b18, update to version 2.81.b18 or later to resolve the issue. At the moment, there is no information about a newer version that contains a fix for the unspecified versions of fsp.

Fix

Related Identifiers

BDU:2015-03108

BDU:2015-03109

CVE-2003-1022

DSA-416

Affected Products

Fsp

References · 11

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0011 · Security Note
• http://securityfocus.com/bid/9377 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03109 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1022 · Security Note
• http://debian.org/security/2004/dsa-416 · Vendor Advisory
• http://ciac.org/ciac/bulletins/o-048.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1022 · Security Note
• https://bdu.fstec.ru/vul/2015-03108 · Security Note
• http://debian.org/security/dsa-416 · Note
• http://osvdb.org/3346 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14154 · Note