PT-2005-1334 · Biborb · Biborb

Patrick Hof · Published 2005-02-17 · Updated 2025-01-16 · CVE-2005-0254

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions BibORB versions 1.3.2 and earlier

Description The issue is related to the improper enforcement of a restriction for uploading only PDF and PS files. This allows remote attackers to upload arbitrary files, which are then presented to other users with PDF or PS icons. This could potentially trick some users into downloading and executing those files.

Recommendations For BibORB versions 1.3.2 and earlier, consider restricting file uploads to only PDF and PS files as a temporary workaround until a patch is available. Additionally, users should be cautious when downloading files, even if they are presented with PDF or PS icons. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2005-0254

Affected Products

Biborb

References · 6

• 🔥 http://marc.info/?l=full-disclosure&m=110864983905770&w=2 · Exploit
• 🔥 http://marc.info/?l=bugtraq&m=110868948719773&w=2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0254 · Security Note
• http://securityfocus.com/bid/12583 · Patch
• https://t.me/cvenotify/69830 · Telegram Post
• https://t.me/cvenotify/107660 · Telegram Post