PT-2005-2963 · 3Com · 3Com Network Supervisor

Published 2005-09-08 · Updated 2011-03-08 · CVE-2005-2020

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions 3Com Network Supervisor version 5.0.2

Description A directory traversal issue in the web server allows remote attackers to read arbitrary files by using ".." sequences in the URL to TCP port 21700.

Recommendations For version 5.0.2, consider restricting access to TCP port 21700 until a patch is available. As a temporary workaround, avoid using the web server functionality to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-2020

Affected Products

3Com Network Supervisor

References · 5

• http://secunia.com/advisories/16639 · Vendor Advisory
• http://securitytracker.com/id?1014836 · Vendor Advisory
• http://idefense.com/application/poi/display?id=300&type=vulnerabilities&flashstatus=true · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2020 · Security Note
• http://vupen.com/english/advisories/2005/1611 · Note