PT-2005-5326 · Campsite · Campsite

Publicado 2005-12-31 · Atualizado 2017-07-20 · CVE-2005-4661

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Campsite versions prior to 2.3.3

Description The issue concerns the notifyendsubs cron job, which sends an email containing an unencrypted MySQL password. This allows remote attackers to intercept the password.

Recommendations For versions prior to 2.3.3, update to version 2.3.3 or later to resolve the issue. As a temporary workaround, consider disabling the notifyendsubs cron job until a patch is available. Restrict access to the MySQL password to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-4661

Produtos afetados

Campsite

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/23106 · Nota
• http://secunia.com/advisories/17528 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=367403&group_id=66936 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4661 · Nota de Segurança
• http://osvdb.org/20698 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4661 · Nota