PT-2005-4749 · Php · Php Web Statistik

Ascii + 1 · Published 2005-12-05 · Updated 2017-07-20 · CVE-2005-4013

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP Web Statistik version 1.4

Description The issue allows remote attackers to obtain sensitive information, including statistics and the log directory location, possibly the logdb.dta file, due to insufficient access control of the stat.cfg file stored under the web root.

Recommendations For PHP Web Statistik version 1.4, consider restricting access to the stat.cfg file to prevent remote attackers from obtaining sensitive information. As a temporary workaround, restrict access to the stat.cfg file until a proper fix is applied.

Fix

Related Identifiers

CVE-2005-4013

Affected Products

Php Web Statistik

References · 9

• http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html · Vendor Advisory
• http://secunia.com/advisories/17789 · Vendor Advisory
• http://ush.it/2005/11/19/php-web-statistik · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4013 · Security Note
• http://osvdb.org/21209 · Note
• http://osvdb.org/21210 · Note
• http://vupen.com/english/advisories/2005/2645 · Note
• http://freewebstat.com/changelog-english.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23382 · Note