PT-2005-5276 · Bugport · Bugport

Publicado 2005-12-31 · Atualizado 2017-07-20 · CVE-2005-4609

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BugPort versions 1.147 and earlier

Description The issue allows remote attackers to obtain sensitive information, including full path and system configuration, by providing an invalid action parameter in the index.php file.

Recommendations For BugPort versions 1.147 and earlier, consider restricting access to the index.php file until a patch is available. As a temporary workaround, avoid using invalid action parameters in the index.php file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-4609

Produtos afetados

Bugport

Referências · 6

• http://secunia.com/advisories/18282 · Aviso do Fabricante
• http://pridels0.blogspot.com/2005/12/bugport-multiple-vuln.html · Nota
• http://osvdb.org/22144 · Nota
• http://vupen.com/english/advisories/2006/0009 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23921 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4609 · Nota de Segurança