PT-2005-4831 · Contenido · Contenido

Publicado 2005-12-09 · Atualizado 2011-03-08 · CVE-2005-4132

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Contenido versions prior to 4.6.4

Description The issue is related to an unspecified "security leak" vulnerability. It is likely that this is a PHP remote file include vulnerability, which occurs when register globals is on and allow url fopen is true. The impact and attack vectors of this issue are not specified.

Recommendations For versions prior to 4.6.4, update to version 4.6.4 or later to resolve the issue. As a temporary workaround, consider disabling the allow url fopen setting and turning off register globals to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-4132

Produtos afetados

Contenido

Referências · 7

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4132 · Nota
• http://contenido.org/opensourcecms/en/index-b-21-1616.html · Correção
• http://vupen.com/english/advisories/2005/2819 · Nota
• http://securityfocus.com/bid/15790 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4132 · Nota de Segurança
• http://osvdb.org/21566 · Nota
• http://archives.neohapsis.com/archives/apps/freshmeat/2005-12/0008.html · Nota