PT-2005-1897 · Php · Phpsysinfo

Cxib8O3 + 1 · Publicado 2005-03-26 · Atualizado 2017-07-11 · CVE-2005-0869

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpSysInfo version 2.3

Description The issue allows remote attackers to obtain sensitive information via a direct request to certain files, which reveal the path in a PHP error message. Specifically, the affected files include class.OpenBSD.inc.php, class.NetBSD.inc.php, class.FreeBSD.inc.php, class.Darwin.inc.php, XPath.class.php, system header.php, and system footer.php.

Recommendations For phpSysInfo version 2.3, consider restricting direct access to the mentioned files, such as class.OpenBSD.inc.php, class.NetBSD.inc.php, class.FreeBSD.inc.php, class.Darwin.inc.php, XPath.class.php, system header.php, and system footer.php, to prevent the disclosure of sensitive information.

Correção

Identificadores relacionados

CVE-2005-0869

Produtos afetados

Phpsysinfo

Referências · 8

• https://osv.dev/vulnerability/CVE-2005-0869 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2005-0869 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0869 · Nota
• http://secunia.com/advisories/14690 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=111161017209422&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19808 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0869 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2005-0869 · Aviso do Fabricante