CVE-2005-3261 - getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed script

CVE-2005-3261

Summary

getversions.php in versatileBulletinBoard (vBB) 1.0.0 RC2 lists the versions of all installed scripts, which allows remote attackers to obtain sensitive information via a direct request.

References

http://marc.info/?l=bugtraq&m=112907535528616&w=2
http://rgod.altervista.org/versatile100RC2.html
http://secunia.com/advisories/17174/
http://www.osvdb.org/19973
http://www.securityfocus.com/bid/15075

Vulnerable Configurations

cpe:2.3:a:versatilebulletinboard:versatilebulletinboard:1.0.0.rc2:*:*:*:*:*:*:*
cpe:2.3:a:versatilebulletinboard:versatilebulletinboard:1.0.0.rc2:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 18-10-2016 - 03:34)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bid	15075
bugtraq	20051010 versatileBulletinBoard V1.0.0 RC2 (possibly prior versions)
misc	http://rgod.altervista.org/versatile100RC2.html
osvdb	19973
secunia	17174

Last major update

18-10-2016 - 03:34

Published

20-10-2005 - 10:02

Last modified

18-10-2016 - 03:34