CVE-2005-4033

Nodezilla 0.4.13-corno-fulgure does not properly protect the evl_data directory, which could allow them to be shared when they are not protected by PRIVATEDATADIR in nodezilla.ini, which allows remote attackers to obtain sensitive information.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/17867	Patch Vendor Advisory
http://www.nodezilla.net/history.txt
http://www.securityfocus.com/bid/15704	Patch
http://www.vupen.com/english/advisories/2005/2731

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ali_bousahid:nodezilla:0.4.0_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.1_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.2_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.3_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.4_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.5_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.6_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.7_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.8_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.9_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.10_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.11_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.12_corno_fulgure:::::::*
	cpe:2.3:a:ali_bousahid:nodezilla:0.4.13_corno_fulgure:::::::*

History

No history.

Information

Published : 2005-12-06 11:03

Updated : 2011-03-08 02:27

NVD link : CVE-2005-4033

Mitre link : CVE-2005-4033

CVE.ORG link : CVE-2005-4033

JSON object : View

Products Affected

ali_bousahid

nodezilla

CWE

NVD-CWE-Other

{"id": "CVE-2005-4033", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-12-06T11:03:00.000", "references": [{"url": "http://secunia.com/advisories/17867", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.nodezilla.net/history.txt", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/15704", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2005/2731", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Nodezilla 0.4.13-corno-fulgure does not properly protect the evl_data directory, which could allow them to be shared when they are not protected by PRIVATEDATADIR in nodezilla.ini, which allows remote attackers to obtain sensitive information."}], "lastModified": "2011-03-08T02:27:35.033", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.0_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03417B8D-A000-45AE-B3DD-0AC4960C9BB3"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.1_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "60B89F30-A1BB-488B-BD98-A8187CA7BAEE"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.2_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BFCDEB2-2977-4104-8B74-0BB65F90ECFC"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.3_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C661B12D-58DF-4A71-AE18-AAFC5F05B66A"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.4_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "991B6F7C-9FCF-4CAE-B7AF-109C699767E0"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.5_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D2A1760-A32F-4A6A-94D6-5879412C556B"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.6_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA18BC9B-2D5E-4824-833F-941B275138E0"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.7_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AF6F755-8ACE-43F1-8117-B79B1B8193E7"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.8_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59654AF0-28D2-4C6D-BA26-4A5BA14EBFDF"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.9_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C59C49C6-0969-45AF-8FB9-130A0C0F1E74"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.10_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77EA2EA8-FA21-4200-A81B-8D4ECD52537E"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.11_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77730044-545A-4F6C-A240-80136D3B87A8"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.12_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A227A7AB-3412-49DD-8421-F339BC4A5BD6"}, {"criteria": "cpe:2.3:a:ali_bousahid:nodezilla:0.4.13_corno_fulgure:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "34E01E44-9A57-4849-9893-4B7B0FF740A5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}