mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 01:02:25 +00:00
234 lines
7.6 KiB
JSON
234 lines
7.6 KiB
JSON
{
|
|
"id": "CVE-2005-0088",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2005-05-02T04:00:00.000",
|
|
"lastModified": "2018-10-19T15:31:05.840",
|
|
"vulnStatus": "Modified",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "The publisher handler for mod_python 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV2": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "2.0",
|
|
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
|
|
"accessVector": "NETWORK",
|
|
"accessComplexity": "LOW",
|
|
"authentication": "NONE",
|
|
"confidentialityImpact": "PARTIAL",
|
|
"integrityImpact": "PARTIAL",
|
|
"availabilityImpact": "PARTIAL",
|
|
"baseScore": 7.5
|
|
},
|
|
"baseSeverity": "HIGH",
|
|
"exploitabilityScore": 10.0,
|
|
"impactScore": 6.4,
|
|
"acInsufInfo": false,
|
|
"obtainAllPrivilege": false,
|
|
"obtainUserPrivilege": false,
|
|
"obtainOtherPrivilege": true,
|
|
"userInteractionRequired": false
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "NVD-CWE-Other"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "2.7.8",
|
|
"matchCriteriaId": "0359C038-B61F-4640-ADFA-7B8038DFCD9B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:1.9a:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5509C23E-30C8-47E5-A0D6-5DBABD357203"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.0:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "253A9B1A-5E40-4BF3-A181-DD8EC86EB119"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "2CD7D5B0-DB5C-4C92-B701-84274A2D8FEE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "76C96ED2-1B85-4B1F-AAAB-5FC90BF5AB7F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "490DC20E-7A70-4095-82D2-2E8ED23C5BE8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B27C447F-2883-464D-AC9C-22AFF1278E8F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.4.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6E83757F-81A1-48CF-93FE-3F2B8C2E9EAF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F845DD2D-7DCB-4CB4-A70C-ABE10DC136D8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E26E30A3-747D-491D-9930-63488AE5E768"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.6.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "899F6DBB-C557-4C43-8573-217134A1D44B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.6.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B29FD9AA-7B11-4B7D-BA40-B7F488D83892"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.6.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EC9E0311-B2B6-4770-8393-8A65CC3D5BF9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.6.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A5D35BAD-EE65-46E7-845A-DE58D8A1EFDB"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "310A5F62-EF40-462A-B1CD-251704B74C2F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.7.1:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "399203BA-6661-4451-A667-1EBCC0310FA3"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.7.2:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E9604D18-BFA4-4725-8810-8D2BAD9E0DF1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.7.3:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "E7BA1FA8-74C2-4473-B121-C9C958547501"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.7.4:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "695F589B-1CEA-4974-9E47-FB7E5DF5B919"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.7.5:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "1045B136-428A-461C-98BA-3E4C818DE27E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.7.6:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D2BFBBA5-750F-43B4-BE5F-BDBA2E2FDF5F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:apache:mod_python:2.7.7:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "23C3FE2B-C056-4FE5-A8AC-A0BC9B69E454"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000926",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://marc.info/?l=bugtraq&m=110815313218389&w=2",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://security.gentoo.org/glsa/glsa-200502-14.xml",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Patch"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://securitytracker.com/id?1013156",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.debian.org/security/2005/dsa-689",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"Patch"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.kb.cert.org/vuls/id/356409",
|
|
"source": "cve@mitre.org",
|
|
"tags": [
|
|
"US Government Resource"
|
|
]
|
|
},
|
|
{
|
|
"url": "http://www.redhat.com/support/errata/RHSA-2005-100.html",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.redhat.com/support/errata/RHSA-2005-104.html",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/archive/1/430286/100/0/threaded",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.securityfocus.com/bid/12519",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "http://www.trustix.org/errata/2005/0003/",
|
|
"source": "cve@mitre.org"
|
|
},
|
|
{
|
|
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10617",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |