Ubuntu.comUB:CVE-2005-3347CVE-2005-3347
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.6%
Multiple directory traversal vulnerabilities in index.php in phpSysInfo 2.4
and earlier, as used in phpgroupware 0.9.16 and earlier, and egrouwpware
before 1.0.0.009, allow remote attackers to include arbitrary files via …
(dot dot) sequences in the (1) sensor_program parameter or the (2)
_SERVER[HTTP_ACCEPT_LANGUAGE] parameter, which overwrites an internal
variable, a variant of CVE-2003-0536. NOTE: due to a typo in an advisory,
an issue in osh was inadvertently linked to this identifier; the proper
identifier for the osh issue is CVE-2005-3346.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | egroupware | < 1.0.0.009.dfsg-3-4 | UNKNOWN |
| ubuntu | 6.10 | noarch | egroupware | < 1.0.0.009.dfsg-3-4 | UNKNOWN |
| ubuntu | 7.04 | noarch | egroupware | < 1.0.0.009.dfsg-3-4 | UNKNOWN |
| ubuntu | 6.06 | noarch | phpgroupware | < 0.9.16.010-1 | UNKNOWN |
| ubuntu | 6.10 | noarch | phpgroupware | < 0.9.16.010-1 | UNKNOWN |
| ubuntu | 7.04 | noarch | phpgroupware | < 0.9.16.010-1 | UNKNOWN |
| ubuntu | 6.06 | noarch | phpsysinfo | < 2.3-7 | UNKNOWN |
| ubuntu | 6.10 | noarch | phpsysinfo | < 2.3-7 | UNKNOWN |
| ubuntu | 7.04 | noarch | phpsysinfo | < 2.3-7 | UNKNOWN |
Related
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.015 Low
EPSS
Percentile
86.6%