PT-2005-5196 · Webwasher · Webwasher Csm Appliance Suite

V0Rt3X · CVE-2005-4514 · Published 2005-12-23 · Updated 2024-08-08

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Webwasher CSM Appliance Suite version 5.x

Description The encapsulation script mechanism in the affected software uses case-sensitive detection of malicious tokens. This allows attackers to bypass script detection by using tokens that can be either upper or lower case.

Recommendations For Webwasher CSM Appliance Suite version 5.x, consider implementing case-insensitive detection of malicious tokens as a mitigation measure until a patch is available.

Fix

Related Identifiers

CVE-2005-4514

Affected Products

Webwasher Csm Appliance Suite

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-4514 · Security Note
• http://securityreason.com/securityalert/293 · Note
• http://securityfocus.com/archive/1/420106/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23884 · Note
• http://securityfocus.com/archive/1/420678/100/0/threaded · Note
• http://securityfocus.com/bid/16047 · Note
• http://securityfocus.com/archive/1/420158/100/0/threaded · Note