PT-2005-5326 · Campsite · Campsite

Published 2005-12-31 · Updated 2017-07-20 · CVE-2005-4661

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Campsite versions prior to 2.3.3

Description The issue concerns the notifyendsubs cron job, which sends an email containing an unencrypted MySQL password. This allows remote attackers to intercept the password.

Recommendations For versions prior to 2.3.3, update to version 2.3.3 or later to resolve the issue. As a temporary workaround, consider disabling the notifyendsubs cron job until a patch is available. Restrict access to the MySQL password to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4661

Affected Products

Campsite

References · 6

• http://secunia.com/advisories/17528 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4661 · Security Note
• http://osvdb.org/20698 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23106 · Note
• http://sourceforge.net/project/shownotes.php?release_id=367403&group_id=66936 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4661 · Note