[email protected]CVE-2005-1078

HistoryApr 12, 2005 - 4:00 a.m.

CVE-2005-1078

2005-04-1204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

xampp

1.4.x

default passwords

null passwords

privilege escalation

cve-2005-1078

nvd

7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.1%

JSON

XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.

CPENameOperatorVersion
xampp:apache_distributionxampp apache distributioneq1.4.9
xampp:apache_distributionxampp apache distributioneq1.4.11
xampp:apache_distributionxampp apache distributioneq1.4.5
xampp:apache_distributionxampp apache distributioneq1.4.10a
xampp:apache_distributionxampp apache distributioneq1.4.4
xampp:apache_distributionxampp apache distributioneq0.2
xampp:apache_distributionxampp apache distributioneq1.4.2
xampp:apache_distributionxampp apache distributioneq1.4.6
xampp:apache_distributionxampp apache distributioneq1.4.7
xampp:apache_distributionxampp apache distributioneq1.4.12

CPE	Name	Operator	Version
xampp:apache_distribution	xampp apache distribution	eq	1.4.9
xampp:apache_distribution	xampp apache distribution	eq	1.4.11
xampp:apache_distribution	xampp apache distribution	eq	1.4.5
xampp:apache_distribution	xampp apache distribution	eq	1.4.10a
xampp:apache_distribution	xampp apache distribution	eq	1.4.4
xampp:apache_distribution	xampp apache distribution	eq	0.2
xampp:apache_distribution	xampp apache distribution	eq	1.4.2
xampp:apache_distribution	xampp apache distribution	eq	1.4.6
xampp:apache_distribution	xampp apache distribution	eq	1.4.7
xampp:apache_distribution	xampp apache distribution	eq	1.4.12

Rows per page:

1-10 of 171

References

marc.info/?l=full-disclosure&m=111330048629182&w=2

www.securityfocus.com/bid/13131

7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.011 Low

EPSS

Percentile

84.1%

JSON

Related for CVE-2005-1078

nessus2