CVE-2001-1252 Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for...
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multi_config and (4) directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pgp keyserver | = 7.0 | No fix listed |
| pgp keyserver | = 7.0.1 | No fix listed |
References
- 20010928 SNS-43: PGP Keyserver Permissions Misconfiguration mailing-list
- pgp-keyserver-http-dos(7203) patch vdb-entry vendor-advisory
- 1955 vdb-entry
- 4193 vdb-entry
- www.pgp.com
- 3375 vdb-entry