CVE-2003-0398

Опубликовано: 02 июл. 2003

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Vignette StoryServer 4 and 5, and Vignette V/5 and V/6, with the SSI EXEC feature enabled, allows remote attackers to execute arbitrary code via a text variable to a Vignette Application that is later displayed.

Ссылки

http://marc.info/?l=bugtraq&m=105405734223874&w=2
http://www.iss.net/security_center/static/12077.php
Patch
Vendor Advisory
http://www.s21sec.com/es/avisos/s21sec-016-en.txt
Patch
Vendor Advisory
http://www.securityfocus.com/bid/7685
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=105405734223874&w=2
http://www.iss.net/security_center/static/12077.php
Patch
Vendor Advisory
http://www.s21sec.com/es/avisos/s21sec-016-en.txt
Patch
Vendor Advisory
http://www.securityfocus.com/bid/7685
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:vignette:content_suite:6.0:*:*:*:*:*:*:*

cpe:2.3:a:vignette:content_suite:7.0:*:*:*:*:*:*:*

cpe:2.3:a:vignette:storyserver:4.0:*:*:*:*:*:*:*

cpe:2.3:a:vignette:storyserver:4.1:*:*:*:*:*:*:*

cpe:2.3:a:vignette:storyserver:5.0:*:*:*:*:*:*:*

cpe:2.3:a:vignette:vignette:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01983

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2c2r-rcrh-5h3h

github

почти 4 года назад