PT-2005-1840 · Notifylink · Notifylink

Published 2005-03-20 · Updated 2008-09-05 · CVE-2005-0811

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NotifyLink version 3.0

Description The issue concerns the web interface in NotifyLink, where access to certain functions is not properly restricted. This allows remote authenticated users to bypass intended restrictions by making direct requests to specific URLs.

Recommendations For NotifyLink version 3.0, consider restricting access to the vulnerable URLs to minimize the risk of exploitation. As a temporary workaround, limit the functionality accessible through the web interface until a proper fix is available.

Fix

Related Identifiers

CVE-2005-0811

Affected Products

Notifylink

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-0811 · Security Note
• http://secunia.com/advisories/14617 · Note
• http://kb.cert.org/vuls/id/131828 · Note
• http://securityfocus.com/bid/12843 · Note