PT-2005-1334 · Biborb · Biborb

Patrick Hof · Publicado 2005-02-17 · Atualizado 2025-01-16 · CVE-2005-0254

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Baixa

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions BibORB versions 1.3.2 and earlier

Description The issue is related to the improper enforcement of a restriction for uploading only PDF and PS files. This allows remote attackers to upload arbitrary files, which are then presented to other users with PDF or PS icons. This could potentially trick some users into downloading and executing those files.

Recommendations For BibORB versions 1.3.2 and earlier, consider restricting file uploads to only PDF and PS files as a temporary workaround until a patch is available. Additionally, users should be cautious when downloading files, even if they are presented with PDF or PS icons. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2005-0254

Produtos afetados

Biborb

Referências · 6

• 🔥 http://marc.info/?l=full-disclosure&m=110864983905770&w=2 · Exploit
• 🔥 http://marc.info/?l=bugtraq&m=110868948719773&w=2 · Exploit
• https://t.me/cvenotify/69830 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2005-0254 · Nota de Segurança
• http://securityfocus.com/bid/12583 · Correção
• https://t.me/cvenotify/107660 · Publicação no Telegram