Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2005-2320
webcalendar
cve-2005-2320
security vulnerability
privilege escalation
nvd
access restriction
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.5%
WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain privileges.
Affected configurations
Node
webcalendarwebcalendarMatch0.9.8
ORwebcalendarwebcalendarMatch0.9.11
ORwebcalendarwebcalendarMatch0.9.15
ORwebcalendarwebcalendarMatch0.9.16
ORwebcalendarwebcalendarMatch0.9.19
ORwebcalendarwebcalendarMatch0.9.20
ORwebcalendarwebcalendarMatch0.9.21
ORwebcalendarwebcalendarMatch0.9.22
ORwebcalendarwebcalendarMatch0.9.23
ORwebcalendarwebcalendarMatch0.9.24
ORwebcalendarwebcalendarMatch0.9.25
ORwebcalendarwebcalendarMatch0.9.26
ORwebcalendarwebcalendarMatch0.9.27
ORwebcalendarwebcalendarMatch0.9.28
ORwebcalendarwebcalendarMatch0.9.29
ORwebcalendarwebcalendarMatch0.9.30
ORwebcalendarwebcalendarMatch0.9.31
ORwebcalendarwebcalendarMatch0.9.32
ORwebcalendarwebcalendarMatch0.9.33
ORwebcalendarwebcalendarMatch0.9.34
ORwebcalendarwebcalendarMatch0.9.35
ORwebcalendarwebcalendarMatch0.9.36
ORwebcalendarwebcalendarMatch0.9.37
ORwebcalendarwebcalendarMatch0.9.38
ORwebcalendarwebcalendarMatch0.9.39
ORwebcalendarwebcalendarMatch0.9.40
ORwebcalendarwebcalendarMatch0.9.41
ORwebcalendarwebcalendarMatch0.9.42
ORwebcalendarwebcalendarMatch0.9.43
ORwebcalendarwebcalendarMatch0.9.44
ORwebcalendarwebcalendarMatch0.9.45
ORwebcalendarwebcalendarMatch0.9.50
ORwebcalendarwebcalendarMatch1.0.0rc1
ORwebcalendarwebcalendarMatch1.0.0rc2
References
Related
freebsd
freebsd
WebCalendar -- unauthorized access vulnerability
2005-06-27 00:00:00
nessus
nessus
Debian DSA-766-1 : webcalendar - authorisation failure
2005-07-31 00:00:00
WebCalendar assistant_edit.php Unauthorized Access
2005-06-28 00:00:00
openvas
openvas
FreeBSD Ports: WebCalendar
2008-09-04 00:00:00
Debian Security Advisory DSA 766-1 (webcalendar)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-766-1)
2008-01-17 00:00:00
cvelist
cvelist
CVE-2005-2320
2022-10-03 16:22:48
debian
debian
[SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure
2005-07-27 06:22:47
[SECURITY] [DSA 766-1] New webcalendar package fixes information disclosure
2005-07-27 06:22:47
nvd
nvd
CVE-2005-2320
2005-07-19 04:00:00
ubuntucve
ubuntucve
CVE-2005-2320
2005-07-19 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.5%
Related for CVE-2005-2320