PT-2004-3513 · Unknown · Rippy The Aggregator

Published 2004-12-31 · Updated 2017-07-20 · CVE-2004-2623

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Rippy the Aggregator versions prior to 0.10

Description The issue is related to an unknown vulnerability in Rippy the Aggregator, possibly connected to the "user-controlled filter" when register globals is enabled. The attack vectors and impact are not specified.

Recommendations For versions prior to 0.10, consider disabling the feature related to the "user-controlled filter" until a fix is available. Additionally, disabling register globals can help mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-2623

Affected Products

Rippy The Aggregator

References · 7

• http://secunia.com/advisories/12769 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2623 · Security Note
• http://osvdb.org/10481 · Patch
• http://freshmeat.net/projects/rippy/?branch_id=30091&release_id=173997 · Note
• http://ansuz.sooke.bc.ca/rippy/ChangeLog · Note
• http://securitytracker.com/id?1011582 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17674 · Note