Lucene search

[email protected]CVE-2005-3979

HistoryDec 03, 2005 - 7:03 p.m.

CVE-2005-3979

2005-12-0319:03:00

CWE-287

[email protected]

web.nvd.nist.gov

coppermine photo gallery

cve-2005-3979

authentication bypass

sensitive information disclosure

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.1%

JSON

relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.

Affected configurations

NVD

Node

coppermine-gallerycoppermine_photo_galleryMatch1.4beta

coppermine-gallerycoppermine_photo_galleryMatch1.4.2

CPENameOperatorVersion
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.4
coppermine-gallery:coppermine_photo_gallerycoppermine-gallery coppermine photo galleryeq1.4.2

CPE	Name	Operator	Version
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.4
coppermine-gallery:coppermine_photo_gallery	coppermine-gallery coppermine photo gallery	eq	1.4.2

References

coppermine-gallery.net/forum/index.php?topic=24217.0

secunia.com/advisories/17855

www.vupen.com/english/advisories/2005/2698

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

77.1%

JSON

Related for CVE-2005-3979

cvelist1 nvd1