PT-2005-5514 · Ez Systems · Ez Publish

Publicado 2005-12-31 · Atualizado 2015-07-28 · CVE-2005-4853

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions: eZ publish versions 3.5 through 3.5.4 eZ publish versions 3.6 through 3.6.1 eZ publish versions 3.7 through 3.7.0rc1 eZ publish versions 3.8 before 20050818

Description: The default configuration of the forum package does not restrict edit permissions to a posting's owner. This allows remote authenticated users to edit arbitrary postings.

Recommendations: For versions 3.5 through 3.5.4, update to version 3.5.5 or later. For versions 3.6 through 3.6.1, update to version 3.6.2 or later. For versions 3.7 through 3.7.0rc1, update to version 3.7.0rc2 or later. For versions 3.8 before 20050818, update to a version released on or after 20050818.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2005-4853

Produtos afetados

Ez Publish

Referências · 4

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4853 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4853 · Nota de Segurança
• http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 · Nota
• http://issues.ez.no/7052 · Nota