National Vulnerability Database (CVE-2000-0628)

National Cyber-Alert System Vulnerability Summary: CVE-2000-0628
Orirignal release date: 2000-07-11 Source: US-CERT/NIST ### Overview The source.asp example script in the Apache ASP module Apache::ASP 1.93 and earlier allows remote attackers to modify files. ### Impact CVSS Severity: 8 (High) Range: remote Authentication: access Impact Type: int,sec_prot user="1" other="1" ### Reference to Advisories, Solutions, and Tools External Source: Security Focus Name: BID 1457 Hyperlink: http://www.securityfocus.com/bid/1457 External Source: ISS X-Force Name: apache-source-asp-file-write(4931) Hyperlink: http://xforce.iss.net/static/4931.php External Source: Bugtraq Name: ANNOUNCE Apache::ASP v1.95 - Security Hole Fixed Hyperlink: http://archives.neohapsis.com/archives/bugtraq/2000-07/0142.html External Source: CONFIRM Name: http://www.nodeworks.com/asp/changes.html Hyperlink: http://www.nodeworks.com/asp/changes.html ### Vulnerable Software and Vendor Apache::ASP (Joshua Chamas) Technical Details CVE Standard Vulnerability Entry: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0628