CVE-2005-2891

Опубликовано: 14 сент. 2005

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the (1) MakeArchive or (2) MakeArchiveStr methods.

Ссылки

http://marc.info/?l=bugtraq&m=112611388014937&w=2
http://secunia.com/advisories/16722/
Vendor Advisory
http://security-assessment.com/Advisories/WebArchiveX_-_Unsafe_Methods_Vulnerability.pdf
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/14760
http://www.securitytracker.com/alerts/2005/Sep/1014867.html
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/22188
http://marc.info/?l=bugtraq&m=112611388014937&w=2
http://secunia.com/advisories/16722/
Vendor Advisory
http://security-assessment.com/Advisories/WebArchiveX_-_Unsafe_Methods_Vulnerability.pdf
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/14760
http://www.securitytracker.com/alerts/2005/Sep/1014867.html
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/22188

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:csystems:webarchivex:5.5.0.76:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00871

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-9v5h-pjw2-wf2g

github

почти 4 года назад