CVE-2005-2556

2005-08-2404:00:00

debian

web.nvd.nist.gov

mantis

database_api.php

register_globals

remote attack

cve-2005-2556

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.007

Percentile

80.3%

JSON

core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to connect to internal databases by modifying the g_db_type variable and monitoring the speed of responses, as identified by bug#0005956.

Affected configurations

Nvd

Node

mantismantisMatch0.19.0

mantismantisMatch0.19.0_rc1

mantismantisMatch0.19.0a1

mantismantisMatch0.19.0a2

mantismantisMatch0.19.1

mantismantisMatch0.19.2

mantismantisMatch1.0.0a1

mantismantisMatch1.0.0a2

mantismantisMatch1.0.0a3

VendorProductVersionCPE
mantismantis0.19.0cpe:2.3:a:mantis:mantis:0.19.0:*:*:*:*:*:*:*
mantismantis0.19.0_rc1cpe:2.3:a:mantis:mantis:0.19.0_rc1:*:*:*:*:*:*:*
mantismantis0.19.0a1cpe:2.3:a:mantis:mantis:0.19.0a1:*:*:*:*:*:*:*
mantismantis0.19.0a2cpe:2.3:a:mantis:mantis:0.19.0a2:*:*:*:*:*:*:*
mantismantis0.19.1cpe:2.3:a:mantis:mantis:0.19.1:*:*:*:*:*:*:*
mantismantis0.19.2cpe:2.3:a:mantis:mantis:0.19.2:*:*:*:*:*:*:*
mantismantis1.0.0a1cpe:2.3:a:mantis:mantis:1.0.0a1:*:*:*:*:*:*:*
mantismantis1.0.0a2cpe:2.3:a:mantis:mantis:1.0.0a2:*:*:*:*:*:*:*
mantismantis1.0.0a3cpe:2.3:a:mantis:mantis:1.0.0a3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mantis	mantis	0.19.0	cpe:2.3:a:mantis:mantis:0.19.0:::::::*
mantis	mantis	0.19.0_rc1	cpe:2.3:a:mantis:mantis:0.19.0_rc1:::::::*
mantis	mantis	0.19.0a1	cpe:2.3:a:mantis:mantis:0.19.0a1:::::::*
mantis	mantis	0.19.0a2	cpe:2.3:a:mantis:mantis:0.19.0a2:::::::*
mantis	mantis	0.19.1	cpe:2.3:a:mantis:mantis:0.19.1:::::::*
mantis	mantis	0.19.2	cpe:2.3:a:mantis:mantis:0.19.2:::::::*
mantis	mantis	1.0.0a1	cpe:2.3:a:mantis:mantis:1.0.0a1:::::::*
mantis	mantis	1.0.0a2	cpe:2.3:a:mantis:mantis:1.0.0a2:::::::*
mantis	mantis	1.0.0a3	cpe:2.3:a:mantis:mantis:1.0.0a3:::::::*