First published: Sat Aug 31 2002(Updated: )
The library feature for Adobe Content Server 3.0 allows a remote attacker to check out an eBook for an arbitrary length of time via a modified loanMin parameter to download.asp.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Adobe Adobe Content Server | =3.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-1019 has been assessed as a moderate severity vulnerability affecting Adobe Content Server 3.0.
To mitigate CVE-2002-1019, update to a patched version of Adobe Content Server that addresses this vulnerability.
CVE-2002-1019 allows a remote attacker to exploit the loanMin parameter through a crafted request.
CVE-2002-1019 specifically affects Adobe Content Server version 3.0.
Yes, CVE-2002-1019 can potentially allow unauthorized access to eBooks by manipulating checkout durations.