Lucene search

[email protected]CVE-2004-2616

HistoryDec 31, 2004 - 5:00 a.m.

CVE-2004-2616

2004-12-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

file server

activepost standard

sensitive information

authenticated users

cve-2004-2616

nvd

6.5 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

68.2%

JSON

The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message.

CPENameOperatorVersion
onnuri_infotek:activepost_standardonnuri infotek activepost standardle3.1
onnuri_infotek:activepost_standardonnuri infotek activepost standardeq3.0
onnuri_infotek:activepost_standardonnuri infotek activepost standardeq2.5

CPE	Name	Operator	Version
onnuri_infotek:activepost_standard	onnuri infotek activepost standard	le	3.1
onnuri_infotek:activepost_standard	onnuri infotek activepost standard	eq	3.0
onnuri_infotek:activepost_standard	onnuri infotek activepost standard	eq	2.5

References

aluigi.altervista.org/adv/actp-adv.txt

archives.neohapsis.com/archives/fulldisclosure/2004-09/0852.html

marc.info/?l=bugtraq&amp%3Bm=109597139011373&amp%3Bw=2

securitytracker.com/id?1011406

www.osvdb.org/10235

6.5 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

68.2%

JSON