Remote Code Execution Vulnerability in Adobe Content Server
CVE-2002-1019

Currently unrated

Key Information:

Vendor

Adobe
Status
Adobe Content Server
Vendor
CVE Published:
4 October 2002

What is CVE-2002-1019?

The Adobe Content Server 3.0 features a library function that can be exploited by a remote attacker through manipulation of the loanMin parameter in the download process. This flaw permits unauthorized eBook checkouts for arbitrary durations, potentially leading to abuse of the eBook lending system and unauthorized access to content.

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q3/...
mailing-listx_refsource_VULNWATCH
http://marc.info/?l=vuln-dev&m=102650064028760&w=2
mailing-listx_refsource_BUGTRAQ
http://marc.info/?l=vuln-dev&m=102649215618643&w=2
mailing-listx_refsource_VULN-DEV

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.