Lucene search

[email protected]CVE-2005-2007

HistoryJun 19, 2005 - 4:00 a.m.

CVE-2005-2007

2005-06-1904:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2005-2007

directory traversal

vulnerability

edgewall trac

nvd

security

remote attackers

arbitrary files

6.9 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

61.1%

JSON

Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a … (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.

CPENameOperatorVersion
edgewall_software:tracedgewall software traceq0.7.1
edgewall_software:tracedgewall software traceq0.6.1
edgewall_software:tracedgewall software traceq0.8
edgewall_software:tracedgewall software traceq0.5
edgewall_software:tracedgewall software traceq0.6
edgewall_software:tracedgewall software traceq0.8.2
edgewall_software:tracedgewall software traceq0.5.2
edgewall_software:tracedgewall software traceq0.5.1
edgewall_software:tracedgewall software traceq0.8.3
edgewall_software:tracedgewall software traceq0.8.1

CPE	Name	Operator	Version
edgewall_software:trac	edgewall software trac	eq	0.7.1
edgewall_software:trac	edgewall software trac	eq	0.6.1
edgewall_software:trac	edgewall software trac	eq	0.8
edgewall_software:trac	edgewall software trac	eq	0.5
edgewall_software:trac	edgewall software trac	eq	0.6
edgewall_software:trac	edgewall software trac	eq	0.8.2
edgewall_software:trac	edgewall software trac	eq	0.5.2
edgewall_software:trac	edgewall software trac	eq	0.5.1
edgewall_software:trac	edgewall software trac	eq	0.8.3
edgewall_software:trac	edgewall software trac	eq	0.8.1

Rows per page:

1-10 of 111

References

lists.grok.org.uk/pipermail/full-disclosure/2005-June/034618.html

secunia.com/advisories/15752

svn.edgewall.com/repos/trac/tags/trac-0.8.4/ChangeLog

www.hardened-php.net/advisory-012005.php

6.9 Medium

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.002 Low

EPSS

Percentile

61.1%

JSON

Related for CVE-2005-2007

debiancve1 nessus1