CVE-2000-0634: Medium severity Stalker CommuniGate Pro vulnerability
The web administration interface for CommuniGate Pro 3.2.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
CommuniGate Profrom your environment.Uninstall CommuniGate Pro if the product or its web administration interface is not required.
- Configuration
Disable the web administration interface if it is not required. If it is required, configure the product to restrict access to localhost or only to a trusted management subnet/IPs.
CommuniGate Pro web administration interface enabled / access = disabled or limited to localhost/trusted management IPs - Compensating control
Block or restrict network access to the CommuniGate Pro web administration interface using firewalls, ACLs, or a management VLAN so that only trusted administrative hosts can reach it.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0634?
CVE-2000-0634 is rated as a high severity vulnerability due to its potential for exposing sensitive information.
How do I fix CVE-2000-0634?
To fix CVE-2000-0634, upgrade CommuniGate Pro to the latest version that resolves this directory traversal issue.
Which versions of CommuniGate Pro are affected by CVE-2000-0634?
CVE-2000-0634 affects CommuniGate Pro versions 3.2.5 and earlier.
What type of attack is associated with CVE-2000-0634?
CVE-2000-0634 is associated with a dot dot attack, enabling attackers to read arbitrary files on the server.
Can CVE-2000-0634 lead to unauthorized access?
Yes, CVE-2000-0634 can lead to unauthorized access to sensitive files on the server.