Sambar Server search.dll Sambar ISAPI Search功能输入验证漏洞

漏洞信息详情

Sambar Server search.dll Sambar ISAPI Search功能输入验证漏洞

• CNNVD编号：CNNVD-200011-032
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2000-0835
  
• 漏洞类型：
  
  
  输入验证
  
• 发布时间：
  
  2000-11-14
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2010-01-16
  
• 厂        商：
  
  sambar
• 漏洞来源：
  This vulnerability…

Sambar Server 4.4 Beta 3版本的search.dll Sambar ISAPI Search功能中存在输入验证漏洞。远程攻击者可通过指定查询参数中的目录读取任意目录。

Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com.

来源: BID
名称: 1684
链接:http://www.securityfocus.com/bid/1684

来源: BUGTRAQ
名称: 20000915 Sambar Server search CGI vulnerability
链接:http://archives.neohapsis.com/archives/bugtraq/2000-09/0175.html