PT-2000-1324 · Gossamer Threads · Gossamer Threads Dbman
CVE-2000-0381
·
Publicado
2000-05-05
·
Atualizado
2024-02-14
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Gossamer Threads DBMan version db.cgi
Description
The issue allows remote attackers to view environmental variables and setup information. This is achieved by referencing a non-existing database in the
db parameter.Recommendations
For Gossamer Threads DBMan version db.cgi, consider restricting access to the db.cgi script until a patch is available. As a temporary workaround, avoid using the
db parameter with non-existing database references to minimize the risk of exploitation.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Gossamer Threads Dbman