[email protected]CVE-2005-3404

HistoryNov 01, 2005 - 12:47 p.m.

CVE-2005-3404

2005-11-0112:47:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-3404

php

file inclusion

vulnerabilities

atutor

remote attackers

arbitrary files

null byte

nvd

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.106 Low

EPSS

Percentile

95.0%

JSON

Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte (%00) in (1) body_header.inc.php and (2) print.php.

CPENameOperatorVersion
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.4.2
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.5.1
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.4.1
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.5.1_pl1
adaptive_technology_resource_centre:atutoradaptive technology resource centre atutoreq1.4.3

CPE	Name	Operator	Version
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.4.2
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.5.1
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.4.1
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.5.1_pl1
adaptive_technology_resource_centre:atutor	adaptive technology resource centre atutor	eq	1.4.3

References

marc.info/?l=bugtraq&m=113043022821049&w=2

secunia.com/advisories/16915/

secunia.com/secunia_research/2005-55/advisory/

securityreason.com/securityalert/123

securitytracker.com/id?1015165

www.osvdb.org/20345

www.osvdb.org/20346

www.securityfocus.com/bid/15221

www.vupen.com/english/advisories/2005/2228

7.2 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.106 Low

EPSS

Percentile

95.0%

JSON

Related for CVE-2005-3404

cve1 openvas1 nessus1