Lucene search
MitreCVE-2005-1055HistoryApr 12, 2005 - 4:00 a.m.
CVE-2005-1055
2005-04-1204:00:00
mitre
web.nvd.nist.gov
21
cve-2005-1055
towerblog
web security
data storage
remote attack
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.012
Percentile
85.5%
TowerBlog 0.6 and earlier stores the login data file under the web root, which allows remote attackers to obtain the MD5 checksums of the username and password via a direct request to the _dat/login file.
Affected configurations
Node
towerblogtowerblogMatch0.2
ORtowerblogtowerblogMatch0.4_r1
ORtowerblogtowerblogMatch0.6
ORtowerblogtowerblogMatch0.6_r1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| towerblog | towerblog | 0.2 | cpe:2.3:a:towerblog:towerblog:0.2:*:*:*:*:*:*:* |
| towerblog | towerblog | 0.4_r1 | cpe:2.3:a:towerblog:towerblog:0.4_r1:*:*:*:*:*:*:* |
| towerblog | towerblog | 0.6 | cpe:2.3:a:towerblog:towerblog:0.6:*:*:*:*:*:*:* |
| towerblog | towerblog | 0.6_r1 | cpe:2.3:a:towerblog:towerblog:0.6_r1:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.2
Confidence
Low
EPSS
0.012
Percentile
85.5%
Related for CVE-2005-1055