René Helmke 7791f18b51 bootstrap
2023-05-16 16:09:41 +02:00

96 lines
2.7 KiB
JSON

{
"id": "CVE-2005-1738",
"sourceIdentifier": "cve@mitre.org",
"published": "2005-05-24T04:00:00.000",
"lastModified": "2008-09-05T20:49:56.403",
"vulnStatus": "Analyzed",
"evaluatorSolution": "Fixed in version 0.3 d",
"descriptions": [
{
"lang": "en",
"value": "Format string vulnerability in the logPrintBadfile function in delbadfiles.c Iron Bars SHell (ibsh) before 0.3d allows users to \"access files outside the home directory\" and possibly execute arbitrary code via certain inputs that are not properly handled in a syslog call."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": true,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:iron_bars_shell:iron_bars_shell:0.3a:*:*:*:*:*:*:*",
"matchCriteriaId": "24242D6A-941E-4E0C-A750-70914C477D8C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:iron_bars_shell:iron_bars_shell:0.3b:*:*:*:*:*:*:*",
"matchCriteriaId": "6FDAC396-66E7-471E-B04D-554DCC738519"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:iron_bars_shell:iron_bars_shell:0.3c:*:*:*:*:*:*:*",
"matchCriteriaId": "E4B785B4-EA51-4A6F-9B63-3819566C5109"
}
]
}
]
}
],
"references": [
{
"url": "http://sourceforge.net/project/shownotes.php?release_id=329340",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://www.securityfocus.com/bid/13720",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
}
]
}