Vulnerability Description
FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests to unknown scripts, which reveals the web document root in an error message.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Flatnuke | Flatnuke | <= 2.5.3 |
Related Weaknesses (CWE)
References
- http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256Product
- http://secunia.com/advisories/15603Broken Link
- http://securitytracker.com/id?1014114Broken LinkExploitThird Party Advisory
- http://secwatch.org/advisories/secwatch/20050604_flatnuke.txtBroken LinkPatchVendor Advisory
- http://www.vupen.com/english/advisories/2005/0697Broken Link
- http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256Product
- http://secunia.com/advisories/15603Broken Link
- http://securitytracker.com/id?1014114Broken LinkExploitThird Party Advisory
- http://secwatch.org/advisories/secwatch/20050604_flatnuke.txtBroken LinkPatchVendor Advisory
- http://www.vupen.com/english/advisories/2005/0697Broken Link
FAQ
What is CVE-2005-1892?
CVE-2005-1892 is a vulnerability with a CVSS score of 6.4 (MEDIUM). FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests t...
How severe is CVE-2005-1892?
CVE-2005-1892 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-1892?
Check the references section above for vendor advisories and patch information. Affected products include: Flatnuke Flatnuke.