CVE-2002-0877

概要

参考情報

• archives.neohapsis.com/archives/bugtraq/2002-05/0282.html
• iss.net/security_center/static/9224.php · Vendor Advisory
• securityfocus.com/bid/4896 · Vendor Advisory

shambala server のその他の脆弱性

• CVE-2002-0876中 5.0Web server for Shambala 4.5 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request.
• CVE-2001-0758高 7.5Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via "CWD ..." command.
• CVE-2000-0954緊急 10.0Shambala Server 4.5 stores passwords in plaintext, which could allow local users to obtain the passwords and compromise the server.
• CVE-2000-0953中 5.0Shambala Server 4.5 allows remote attackers to cause a denial of service by opening then closing a connection.