Lucene search
HistoryDec 21, 2005 - 11:03 a.m.
CVE-2005-4448
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.019
Percentile
88.8%
FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash (possibly via CVE-2005-2813), then calculating the credentials and including them in the secid cookie.
Affected configurations
Node
flatnukeflatnukeMatch2.5.6
Related
cvelist
cvelist
CVE-2005-4448
2005-12-21 11:00:00
CVE-2005-2813
2005-09-07 04:00:00
cve
cve
CVE-2005-4448
2005-12-21 11:03:00
CVE-2005-2813
2005-09-07 18:03:00
exploitdb
exploitdb
FlatNuke 2.5.6 - 'ID' Directory Traversal
2005-08-31 00:00:00
nvd
nvd
CVE-2005-2813
2005-09-07 18:03:00
nessus
nessus
FlatNuke index.php id Parameter Traversal Arbitrary File Access
2005-12-12 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7
Confidence
Low
EPSS
0.019
Percentile
88.8%
Related for NVD:CVE-2005-4448