PT-2004-3513 · Unknown · Rippy The Aggregator

Publicado 2004-12-31 · Atualizado 2017-07-20 · CVE-2004-2623

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rippy the Aggregator versions prior to 0.10

Description The issue is related to an unknown vulnerability in Rippy the Aggregator, possibly connected to the "user-controlled filter" when register globals is enabled. The attack vectors and impact are not specified.

Recommendations For versions prior to 0.10, consider disabling the feature related to the "user-controlled filter" until a fix is available. Additionally, disabling register globals can help mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-2623

Produtos afetados

Rippy The Aggregator

Referências · 7

• http://freshmeat.net/projects/rippy/?branch_id=30091&release_id=173997 · Nota
• http://secunia.com/advisories/12769 · Aviso do Fabricante
• http://ansuz.sooke.bc.ca/rippy/ChangeLog · Nota
• http://securitytracker.com/id?1011582 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2623 · Nota de Segurança
• http://osvdb.org/10481 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17674 · Nota