Lucene search

MitreCVE-2001-0821

HistoryDec 06, 2001 - 5:00 a.m.

CVE-2001-0821

2001-12-0605:00:00

mitre

web.nvd.nist.gov

148

dcshop 1.002 beta

default configuration

sensitive data

http get request

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.008

Percentile

81.1%

JSON

The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.

Affected configurations

Nvd

Node

dcscriptsdcshopMatch1.002_beta

VendorProductVersionCPE
dcscriptsdcshop1.002_betacpe:2.3:a:dcscripts:dcshop:1.002_beta:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dcscripts	dcshop	1.002_beta	cpe:2.3:a:dcscripts:dcshop:1.002_beta:::::::*

References

archives.neohapsis.com/archives/bugtraq/2001-06/0233.html

www.dcscripts.com/dcforum/dcshop/44.html

www.securityfocus.com/bid/2889

exchange.xforce.ibmcloud.com/vulnerabilities/6707

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.008

Percentile

81.1%

JSON

Related for CVE-2001-0821