CVE-2005-4687

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-4687
PunBB 1.2.9, used alone or with F-ART BLOG:CMS, may trust a client's IP address as specified in the X-Forwarded-For HTTP header rather than the TCP/IP stack, which allows remote attackers to misrepresent their IP address by sending a modified header.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://secunia.com/advisories/17425 Patch Vendor Advisory
http://secunia.com/advisories/17433 Patch Vendor Advisory
http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt
http://www.securityfocus.com/bid/15326 Patch
http://secunia.com/advisories/17425 Patch Vendor Advisory
http://secunia.com/advisories/17433 Patch Vendor Advisory
http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt
http://www.securityfocus.com/bid/15326 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:f-art_agency:blog_cms:3.0:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.1:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.1.3:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.1.4:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.6.2:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:3.6.4:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0a:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0b:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0c:*:*:*:*:*:*:*
cpe:2.3:a:f-art_agency:blog_cms:4.0.0d:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.3:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.4:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.5:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.6:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.7:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.8:*:*:*:*:*:*:*
cpe:2.3:a:punbb:punbb:1.2.9:*:*:*:*:*:*:*
History

21 Nov 2024, 00:04

Type Values Removed Values Added
References () http://secunia.com/advisories/17425 - Patch, Vendor Advisory () http://secunia.com/advisories/17425 - Patch, Vendor Advisory
References () http://secunia.com/advisories/17433 - Patch, Vendor Advisory () http://secunia.com/advisories/17433 - Patch, Vendor Advisory
References () http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt - () http://www.punbb.org/changelogs/1.2.9_to_1.2.10.txt -
References () http://www.securityfocus.com/bid/15326 - Patch () http://www.securityfocus.com/bid/15326 - Patch
Information

Published : 2005-12-31 05:00

Updated : 2024-11-21 00:04

NVD link : CVE-2005-4687

Mitre link : CVE-2005-4687

CVE.ORG link : CVE-2005-4687

JSON object : View

Products Affected

f-art_agency

  • blog_cms

punbb

  • punbb
CWE
NVD-CWE-Other