Description
Network Associates PGP Keyserver 7.0 allows remote attackers to bypass authentication and access the administrative web interface via URLs that directly access cgi-bin instead of keyserver/cgi-bin for the programs (1) console, (2) cs, (3) multi_config and (4) directory.
References
- 1955 vdb-entry
- 20010928 SNS-43: PGP Keyserver Permissions Misconfiguration mailing-list
- http://www.pgp.com/support/product-advisories/keyserver.asp
- 4193 vdb-entry
- pgp-keyserver-http-dos(7203) vdb-entry
- 3375 vdb-entry