CVE-2005-4135

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/15764	Exploit
http://secunia.com/advisories/17949	Vendor Advisory
http://securitytracker.com/id?1015323
http://www.vupen.com/english/advisories/2005/2807
http://www.securityfocus.com/archive/1/418838/100/0/threaded

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:simplemedia:simplebbs:1.0.6:::::::*
	cpe:2.3:a:simplemedia:simplebbs:1.0.7:::::::*
	cpe:2.3:a:simplemedia:simplebbs:1.1:::::::*

Information

Published : 2005-12-09 07:03

Updated : 2018-10-19 08:40

NVD link : CVE-2005-4135

Mitre link : CVE-2005-4135

JSON object : View

CWE

NVD-CWE-Other

Products Affected

simplemedia

simplebbs

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/15764", "name": "15764", "tags": ["Exploit"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/17949", "name": "17949", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://securitytracker.com/id?1015323", "name": "1015323", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.vupen.com/english/advisories/2005/2807", "name": "ADV-2005-2807", "tags": [], "refsource": "VUPEN"}, {"url": "http://www.securityfocus.com/archive/1/418838/100/0/threaded", "name": "20051207 SimpleBBS <= v1.1 remote commands execution in c by: unitedasia security crew", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2005-4135", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2005-12-09T15:03Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:simplemedia:simplebbs:1.0.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:simplemedia:simplebbs:1.0.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:simplemedia:simplebbs:1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-19T15:40Z"}

7.5 /10