Vulnerability CVE-2002-0134
Published: 2002-03-25   Modified: 2012-02-12

Description:
Telnet proxy in Avirt Gateway Suite 4.2 does not require authentication for connecting to the proxy system itself, which allows remote attackers to list file contents of the proxy and execute arbitrary commands via a "dos" command.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Avirt -> Avirt gateway suite 

 References:
http://marc.info/?l=bugtraq&m=101131669102843&w=2
http://marc.info/?l=bugtraq&m=101424723728817&w=2
http://www.iss.net/security_center/static/7915.php
http://www.securityfocus.com/bid/3901
Copyright 2024, cxsecurity.com

 

Back to Top