Unscored severity · published Dec 31, 2005
CVE-2005-3630
Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FC
Fedora Core · Redhat
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3630
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3630
directory.fedora.redhat.com
http://directory.fedora.redhat.com/wiki/FDS10Announcement
Patch
http://secunia.com/advisories/18939
Patch
http://www.securityfocus.com/bid/16729
Patch
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121994
bugzilla.redhat.com
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174837
More from Fedora Core
5.6
CVE-2005-0109
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…
–
CVE-2007-6131
buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files
–
CVE-2007-2874
Buffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 allows user-assisted remote attackers to…
–
CVE-2007-2030
lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked
–
CVE-2007-1352
Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary code via a long first line in the…