CVE-2005-4012

概要

参考情報

• cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html · Vendor Advisory
• freewebstat.com/changelog-english.html
• secunia.com/advisories/17789 · Vendor Advisory
• osvdb.org/21208
• osvdb.org/21212
• securityfocus.com/bid/15603
• ush.it/2005/11/19/php-web-statistik · Exploit
• vupen.com/english/advisories/2005/2645
• exchange.xforce.ibmcloud.com/vulnerabilities/23379
• exchange.xforce.ibmcloud.com/vulnerabilities/23385

statistik のその他の脆弱性

• CVE-2005-4015中 5.0PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log…
• CVE-2005-4014高 7.8stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value.
• CVE-2005-4013中 5.0PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which allows remote attackers to obtain …