Lucene search

[email protected]CVE-2001-0437

HistoryJul 02, 2001 - 4:00 a.m.

CVE-2001-0437

2001-07-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0437

dcforum 2000

file upload vulnerability

upload_file.pl

nvd

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

83.0%

JSON

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.

CPENameOperatorVersion
dcscripts:dcforumdcscripts dcforumeq2.0
dcscripts:dcforum_2000dcscripts dcforum 2000eq1.0
dcscripts:dcforumdcscripts dcforumeq1.0
dcscripts:dcforumdcscripts dcforumeq3.0
dcscripts:dcforumdcscripts dcforumeq5.0
dcscripts:dcforumdcscripts dcforumeq6.0
dcscripts:dcforumdcscripts dcforumeq4.0

CPE	Name	Operator	Version
dcscripts:dcforum	dcscripts dcforum	eq	2.0
dcscripts:dcforum_2000	dcscripts dcforum 2000	eq	1.0
dcscripts:dcforum	dcscripts dcforum	eq	1.0
dcscripts:dcforum	dcscripts dcforum	eq	3.0
dcscripts:dcforum	dcscripts dcforum	eq	5.0
dcscripts:dcforum	dcscripts dcforum	eq	6.0
dcscripts:dcforum	dcscripts dcforum	eq	4.0

References

archives.neohapsis.com/archives/bugtraq/2001-04/0269.html

www.dcscripts.com/FAQ/sec_2001_03_31.html

www.securityfocus.com/bid/2611

exchange.xforce.ibmcloud.com/vulnerabilities/6393

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.009 Low

EPSS

Percentile

83.0%

JSON

Related for CVE-2001-0437

nessus1