5
CVE-2005-3630
- EPSS 1.39%
- Veröffentlicht 31.12.2005 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:17:18
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginFedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Fedora Core Version1.0 Editiondirectory_server
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.39% | 0.688 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://directory.fedora.redhat.com/wiki/FDS10Announcement
http://secunia.com/advisories/18939
http://www.securityfocus.com/bid/16729
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121994
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174837