Lucene search

K
cve[email protected]CVE-2005-0299
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0299

2005-05-0204:00:00
web.nvd.nist.gov
25
cve-2005-0299
gforge
directory traversal
remote attackers
security vulnerability
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.2%

Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a … (dot dot) in the (1) dir parameter to controller.php or (2) dir_name parameter to controlleroo.php.

Affected configurations

NVD
Node
gforgegforgeMatch3.1
OR
gforgegforgeMatch3.2
OR
gforgegforgeMatch3.3
OR
gforgegforgeMatch3.21

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.2%