Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2005-3348HistoryNov 18, 2005 - 2:02 a.m.
CVE-2005-3348
2005-11-1802:02:00
Debian Security Bug Tracker
security-tracker.debian.org
12
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
75.0%
HTTP response splitting vulnerability in index.php in phpSysInfo 2.4 and earlier, as used in phpgroupware 0.9.16 and earlier, and egroupware before 1.0.0.009, allows remote attackers to spoof web content and poison web caches via CRLF sequences in the charset parameter.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | phpsysinfo | < 2.3-7 | phpsysinfo_2.3-7_all.deb |
| Debian | 11 | all | phpsysinfo | < 2.3-7 | phpsysinfo_2.3-7_all.deb |
| Debian | 999 | all | phpsysinfo | < 2.3-7 | phpsysinfo_2.3-7_all.deb |
| Debian | 13 | all | phpsysinfo | < 2.3-7 | phpsysinfo_2.3-7_all.deb |
Related
ubuntucve
ubuntucve
CVE-2005-3348
2005-11-18 00:00:00
cve
cve
CVE-2005-3348
2005-11-18 02:02:00
openvas
openvas
FreeBSD Ports: phpSysInfo
2008-09-04 00:00:00
FreeBSD Ports: phpSysInfo
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200511-18 (phpsysinfo)
2008-09-24 00:00:00
gentoo
gentoo
phpSysInfo: Multiple vulnerabilities
2005-11-22 00:00:00
nessus
nessus
GLSA-200511-18 : phpSysInfo: Multiple vulnerabilities
2005-12-07 00:00:00
Debian DSA-898-1 : phpgroupware - programming errors
2006-10-14 00:00:00
Debian DSA-897-1 : phpsysinfo - programming errors
2006-10-14 00:00:00
debian
debian
[SECURITY] [DSA 897-1] New phpsysinfo packages fix several vulnerabilities
2005-11-15 10:47:28
[SECURITY] [DSA 898-1] New phpgroupware packages fix several vulnerabilities
2005-11-17 10:31:32
[SECURITY] [DSA 898-1] New phpgroupware packages fix several vulnerabilities
2005-11-17 10:31:32
osv
osv
phpsysinfo - programming errors
2005-11-15 00:00:00
phpgroupware - programming errors
2005-11-17 00:00:00
egroupware - programming errors
2005-11-17 00:00:00
securityvulns
securityvulns
[Full-disclosure] Advisory 22/2005: Multiple vulnerabilities in phpSysInfo
2005-11-14 00:00:00
packetstorm
packetstorm
Hardened-PHP Project Security Advisory 2005-21.81
2005-11-15 00:00:00
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
75.0%
Related for DEBIANCVE:CVE-2005-3348