PT-2005-3873 · Hosting Controller · Hosting Controller

Published 2005-09-22 · Updated 2008-09-05 · CVE-2005-3038

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hosting Controller version 6.1 before Hotfix 2.4

Description The issue allows remote attackers to list and read contents of arbitrary drives. It is related to a PHP vulnerability.

Recommendations For Hosting Controller version 6.1 before Hotfix 2.4, apply Hotfix 2.4 to resolve the issue.

Fix

Related Identifiers

CVE-2005-3038

Affected Products

Hosting Controller

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-3038 · Security Note
• http://securityfocus.com/bid/14840 · Patch
• http://secunia.com/advisories/16824 · Vendor Advisory
• http://hostingcontroller.com/english/logs/hotfixlogv61_2_4.html · Note