Lucene search

MitreCVE-2005-4875

HistoryMay 19, 2008 - 10:00 a.m.

CVE-2005-4875

2008-05-1910:00:00

CWE-200

mitre

web.nvd.nist.gov

typo3

remote attack

information disclosure

cve-2005-4875

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0.008

Percentile

81.2%

JSON

TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.

Affected configurations

Nvd

Node

typo3typo3Range≤3.8.0

typo3typo3Match1.1

typo3typo3Match3.7.0

VendorProductVersionCPE
typo3typo3*cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*
typo3typo31.1cpe:2.3:a:typo3:typo3:1.1:*:*:*:*:*:*:*
typo3typo33.7.0cpe:2.3:a:typo3:typo3:3.7.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
typo3	typo3	*	cpe:2.3:a:typo3:typo3::::::::
typo3	typo3	1.1	cpe:2.3:a:typo3:typo3:1.1:::::::*
typo3	typo3	3.7.0	cpe:2.3:a:typo3:typo3:3.7.0:::::::*

References

bugs.typo3.org/view.php?id=1250

typo3.org/teams/security/security-bulletins/typo3-20050725-1/

exchange.xforce.ibmcloud.com/vulnerabilities/42457

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

0.008

Percentile

81.2%

JSON

Related for CVE-2005-4875