Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0435
HistoryMar 07, 2011 - 12:00 a.m.

CVE-2011-0435

2011-03-0700:00:00
ubuntu.com
ubuntu.com
6

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.007

Percentile

80.4%

Domain Technologie Control (DTC) before 0.32.9 does not require
authentication for (1) admin/bw_per_month.php and (2)
client/bw_per_month.php, which allows remote attackers to obtain
potentially sensitive bandwidth information via a direct request.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchdtc< 0.25.3-2ubuntu1.1UNKNOWN
ubuntu9.10noarchdtc< 0.29.17-1+lenny1build0.9.10.1UNKNOWN
ubuntu10.04noarchdtc< 0.30.10-1ubuntu1UNKNOWN
ubuntu10.10noarchdtc< 0.30.18-1ubuntu1UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.007

Percentile

80.4%