PT-2005-4749 · Php · Php Web Statistik

Ascii + 1 · Publicado 2005-12-05 · Atualizado 2017-07-20 · CVE-2005-4013

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP Web Statistik version 1.4

Description The issue allows remote attackers to obtain sensitive information, including statistics and the log directory location, possibly the logdb.dta file, due to insufficient access control of the stat.cfg file stored under the web root.

Recommendations For PHP Web Statistik version 1.4, consider restricting access to the stat.cfg file to prevent remote attackers from obtaining sensitive information. As a temporary workaround, restrict access to the stat.cfg file until a proper fix is applied.

Correção

Identificadores relacionados

CVE-2005-4013

Produtos afetados

Php Web Statistik

Referências · 9

• http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html · Aviso do Fabricante
• http://osvdb.org/21209 · Nota
• http://osvdb.org/21210 · Nota
• http://vupen.com/english/advisories/2005/2645 · Nota
• http://secunia.com/advisories/17789 · Aviso do Fabricante
• http://ush.it/2005/11/19/php-web-statistik · Aviso do Fabricante
• http://freewebstat.com/changelog-english.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23382 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4013 · Nota de Segurança