CVE-2001-0447 - Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, a

CVE-2001-0447

Summary

Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" (dot dot) characters.

References

http://www.securityfocus.com/archive/1/171418
http://www.securityfocus.com/bid/2514

Vulnerable Configurations

cpe:2.3:a:software602:602pro_lan_suite:2000a_2000.0.1.34:*:*:*:*:*:*:*
cpe:2.3:a:software602:602pro_lan_suite:2000a_2000.0.1.34:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 05-09-2008 - 20:24)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	2514
bugtraq	20010326 602Pro Lansuite Denial Of Service 1.0.34

Last major update

05-09-2008 - 20:24

Published

18-06-2001 - 04:00

Last modified

05-09-2008 - 20:24