PT-2005-4831 · Contenido · Contenido

Published 2005-12-09 · Updated 2011-03-08 · CVE-2005-4132

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Contenido versions prior to 4.6.4

Description The issue is related to an unspecified "security leak" vulnerability. It is likely that this is a PHP remote file include vulnerability, which occurs when register globals is on and allow url fopen is true. The impact and attack vectors of this issue are not specified.

Recommendations For versions prior to 4.6.4, update to version 4.6.4 or later to resolve the issue. As a temporary workaround, consider disabling the allow url fopen setting and turning off register globals to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4132

Affected Products

Contenido

References · 7

• http://contenido.org/opensourcecms/en/index-b-21-1616.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-4132 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4132 · Note
• http://vupen.com/english/advisories/2005/2819 · Note
• http://securityfocus.com/bid/15790 · Note
• http://osvdb.org/21566 · Note
• http://archives.neohapsis.com/archives/apps/freshmeat/2005-12/0008.html · Note