Lucene search

MitreCVE-2005-3480

HistoryNov 03, 2005 - 2:02 a.m.

CVE-2005-3480

2005-11-0302:02:00

mitre

web.nvd.nist.gov

cve-2005-3480

ringtail casebook 6.1.0

username disclosure

remote attack

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

0.006

Percentile

78.5%

JSON

login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames.

Affected configurations

Nvd

Node

ringtailcasebookMatch6.1.0

VendorProductVersionCPE
ringtailcasebook6.1.0cpe:2.3:a:ringtail:casebook:6.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ringtail	casebook	6.1.0	cpe:2.3:a:ringtail:casebook:6.1.0:::::::*

References

secunia.com/advisories/17383

www.osvdb.org/20422

www.procheckup.com/Vulner_PR0413.php

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

Confidence

Low

EPSS

0.006

Percentile

78.5%

JSON

Related for CVE-2005-3480