Lucene search

K
jvnJapan Vulnerability NotesJVN:86833991
HistoryNov 21, 2008 - 12:00 a.m.

JVN#86833991 CGI RESCUE MiniBBS2000 directory traversal vulnerability

2008-11-2100:00:00
Japan Vulnerability Notes
jvn.jp
15

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

75.1%

MiniBBS2000, a message board script provided by CGI RESCUE, contains a directory traversal vulnerability.

Impact

A remote attacker could view files on the server where MiniBBS2000 is installed. This could lead to disclosure of file contents.

Solution

Update the Software
Update to the latest version according to the information provided by the vendor.

Products Affected

  • MiniBBS2000 v1.02 and earlier
  • MiniBBS2000i v1.02 and earlier

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

75.1%

Related for JVN:86833991