Lucene search
HistoryApr 12, 2005 - 4:00 a.m.
CVE-2005-1078
xampp
1.4.x
default passwords
null passwords
privilege escalation
cve-2005-1078
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0.011
Percentile
84.3%
XAMPP 1.4.x has multiple default or null passwords, which allows attackers to gain privileges.
Affected configurations
Node
xamppapache_distributionMatch0.1solaris
ORxamppapache_distributionMatch0.2solaris
ORxamppapache_distributionMatch0.3solaris
ORxamppapache_distributionMatch1.4.1
ORxamppapache_distributionMatch1.4.2
ORxamppapache_distributionMatch1.4.3
ORxamppapache_distributionMatch1.4.4
ORxamppapache_distributionMatch1.4.5
ORxamppapache_distributionMatch1.4.6
ORxamppapache_distributionMatch1.4.7
ORxamppapache_distributionMatch1.4.8
ORxamppapache_distributionMatch1.4.9
ORxamppapache_distributionMatch1.4.10
ORxamppapache_distributionMatch1.4.10a
ORxamppapache_distributionMatch1.4.11
ORxamppapache_distributionMatch1.4.12
ORxamppapache_distributionMatch1.4.13
| Vendor | Product | Version | CPE |
|---|---|---|---|
| xampp | apache_distribution | 1.4.11 | cpe:/a:xampp:apache_distribution:1.4.11::: |
| xampp | apache_distribution | 1.4.10 | cpe:/a:xampp:apache_distribution:1.4.10::: |
| xampp | apache_distribution | 1.4.6 | cpe:/a:xampp:apache_distribution:1.4.6::: |
| xampp | apache_distribution | 1.4.8 | cpe:/a:xampp:apache_distribution:1.4.8::: |
| xampp | apache_distribution | 1.4.9 | cpe:/a:xampp:apache_distribution:1.4.9::: |
| xampp | apache_distribution | 1.4.10a | cpe:/a:xampp:apache_distribution:1.4.10a::: |
| xampp | apache_distribution | 0.2 | cpe:/a:xampp:apache_distribution:0.2::: |
| xampp | apache_distribution | 1.4.2 | cpe:/a:xampp:apache_distribution:1.4.2::: |
| xampp | apache_distribution | 1.4.1 | cpe:/a:xampp:apache_distribution:1.4.1::: |
| xampp | apache_distribution | 1.4.3 | cpe:/a:xampp:apache_distribution:1.4.3::: |
Related
nvd
nvd
CVE-2005-1078
2005-04-12 04:00:00
cvelist
cvelist
CVE-2005-1078
2005-04-12 04:00:00
nessus
nessus
XAMPP Default FTP Account
2005-04-13 00:00:00
XAMPP < 1.4.14 Multiple Vulnerabilities
2005-04-13 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
High
EPSS
0.011
Percentile
84.3%
Related for CVE-2005-1078