critical10.0
CVE-2001-1252
Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access…
Impact
Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multi_config and (4) directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pgp | Keyserver | Versions 7.0, 7.0.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0230.html
- http://www.iss.net/security_center/static/7203.php
- http://www.osvdb.org/1955
- http://www.osvdb.org/4193
- http://www.pgp.com/support/product-advisories/keyserver.asp
- http://www.securityfocus.com/bid/3375
- http://archives.neohapsis.com/archives/bugtraq/2001-09/0230.html
- http://www.iss.net/security_center/static/7203.php
- http://www.osvdb.org/1955
- http://www.osvdb.org/4193
- http://www.pgp.com/support/product-advisories/keyserver.asp
- http://www.securityfocus.com/bid/3375