CVE-2005-0254

Опубликовано: 02 мая 2005

Источник: nvd

CVSS3: 3.7

CVSS2: 4.3

EPSS Низкий

Описание

BibORB 1.3.2, and possibly earlier versions, does not properly enforce a restriction for uploading only PDF and PS files, which allows remote attackers to upload arbitrary files that are presented to other users with PDF or PS icons, which may trick some users into downloading and executing those files.

Ссылки

http://marc.info/?l=bugtraq&m=110868948719773&w=2
Exploit
Mailing List
Third Party Advisory
http://marc.info/?l=full-disclosure&m=110864983905770&w=2
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/12583
Broken Link
Patch
Third Party Advisory
VDB Entry
http://marc.info/?l=bugtraq&m=110868948719773&w=2
Exploit
Mailing List
Third Party Advisory
http://marc.info/?l=full-disclosure&m=110864983905770&w=2
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/12583
Broken Link
Patch
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:guillaumegardey:biborb:1.3.2:-:*:*:*:*:*:*

cpe:2.3:a:guillaumegardey:biborb:1.3.2:rc:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00702

Низкий

3.7 Low

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-pv3p-47qr-3pw4