PT-2005-5518 · Apache+1 · Apache Httpd+1

Published 2005-12-31 · Updated 2015-07-28 · CVE-2005-4857

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: eZ publish versions 3.5 through 3.5.6 eZ publish versions 3.6 through 3.6.4 eZ publish versions 3.7 through 3.7.2 eZ publish versions 3.8 before 20051128

Description: The issue allows remote authenticated users to cause a denial of service, resulting in an Apache httpd segmentation fault. This can be achieved by sending a request to the "content/advancedsearch.php" endpoint with an empty SearchContentClassID parameter. The problem is reportedly related to a memory addressing error.

Recommendations: For versions 3.5 through 3.5.6, update to version 3.5.7 or later. For versions 3.6 through 3.6.4, update to version 3.6.5 or later. For versions 3.7 through 3.7.2, update to version 3.7.3 or later. For versions 3.8 before 20051128, update to a version released on or after 20051128. As a temporary workaround, consider restricting access to the "content/advancedsearch.php" endpoint to minimize the risk of exploitation. Avoid using the SearchContentClassID parameter with an empty value in the affected endpoint until the issue is resolved.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2005-4857

Affected Products

Apache Httpd

Ez Publish

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-4857 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4857 · Note
• http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 · Note
• http://issues.ez.no/7459 · Note