Lucene search

[email protected]CVE-2005-0938

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0938

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

cve-2005-0938

ublog reload

web security

remote attack

data exposure

nvd

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.5%

JSON

Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb.

Affected configurations

NVD

Node

uapplicationublog_reloadMatch1.0

uapplicationublog_reloadMatch1.0.1

uapplicationublog_reloadMatch1.0.2

uapplicationublog_reloadMatch1.0.3

uapplicationublog_reloadMatch1.0.4

CPENameOperatorVersion
uapplication:ublog_reloaduapplication ublog reloadeq1.0
uapplication:ublog_reloaduapplication ublog reloadeq1.0.1
uapplication:ublog_reloaduapplication ublog reloadeq1.0.2
uapplication:ublog_reloaduapplication ublog reloadeq1.0.3
uapplication:ublog_reloaduapplication ublog reloadeq1.0.4

CPE	Name	Operator	Version
uapplication:ublog_reload	uapplication ublog reload	eq	1.0
uapplication:ublog_reload	uapplication ublog reload	eq	1.0.1
uapplication:ublog_reload	uapplication ublog reload	eq	1.0.2
uapplication:ublog_reload	uapplication ublog reload	eq	1.0.3
uapplication:ublog_reload	uapplication ublog reload	eq	1.0.4

References

marc.info/?l=bugtraq&m=111214393101387&w=2

secunia.com/advisories/14725

securitytracker.com/id?1013603

www.persianhacker.net/news/news-2945.html

7 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.006 Low

EPSS

Percentile

78.5%

JSON

Related for CVE-2005-0938

cvelist1 nvd1