PT-2005-1965 · Ublog · Ublog Reload

3Nitro · Publicado 2005-03-30 · Atualizado 2016-10-18 · CVE-2005-0938

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ublog Reload versions 1.0 through 1.0.4

Description The issue allows remote attackers to read usernames and hashed passwords by making a direct request to the ublogreload.mdb file, which is stored under the web root.

Recommendations For versions 1.0 through 1.0.4, consider restricting access to the ublogreload.mdb file to prevent unauthorized reading of sensitive data.

Correção

Identificadores relacionados

CVE-2005-0938

Produtos afetados

Ublog Reload

Referências · 5

• http://secunia.com/advisories/14725 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0938 · Nota de Segurança
• http://securitytracker.com/id?1013603 · Nota
• http://persianhacker.net/news/news-2945.html · Nota
• http://marc.info/?l=bugtraq&m=111214393101387&w=2 · Nota