PT-2005-4210 · Eyeos · Eyeos

Publicado 2005-11-01 · Atualizado 2017-07-11 · CVE-2005-3414

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eyeOS version 0.8.4

Description The issue allows remote attackers to obtain user credentials due to insufficient access control of the usrinfo.xml file, which is stored under the web document root.

Recommendations For eyeOS version 0.8.4, consider restricting access to the usrinfo.xml file to prevent remote attackers from obtaining user credentials. As a temporary workaround, restrict access to the web document root until a proper fix is applied.

Correção

Identificadores relacionados

CVE-2005-3414

Produtos afetados

Eyeos

Referências · 7

• http://securityfocus.com/bid/15256 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3414 · Nota de Segurança
• http://osvdb.org/20411 · Nota
• http://thebillygoatcurse.com/advisories/eyeOS_0.8.4_Multiple.pdf · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22938 · Nota
• http://secunia.com/advisories/17105 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2259 · Nota