Lucene search

[email protected]CVE-2005-3979

HistoryDec 03, 2005 - 7:03 p.m.

CVE-2005-3979

2005-12-0319:03:00

CWE-287

[email protected]

web.nvd.nist.gov

coppermine photo gallery

cve-2005-3979

authentication bypass

sensitive information disclosure

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.9%

JSON

relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.

CPENameOperatorVersion
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.4.2
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.4

CPE	Name	Operator	Version
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.4.2
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.4

References

coppermine-gallery.net/forum/index.php?topic=24217.0

secunia.com/advisories/17855

www.vupen.com/english/advisories/2005/2698

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.9%

JSON

Related for CVE-2005-3979

cvelist1