CVE-2004-2664: Medium severity john lim adodb date library vulnerability
Published Dec 31, 2004
·Updated
John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODBDIR, which reveals the installation path in an error message.
Affected Software
12 affected components
John Lim adodb<=4.22
John Lim adodb=3.94
John Lim adodb=4.00
John Lim adodb=4.01
John Lim adodb=4.02
John Lim adodb=4.03
John Lim adodb=4.04
John Lim adodb=4.05
John Lim adodb=4.10
John Lim adodb=4.11
John Lim adodb=4.20
John Lim adodb=4.21
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Sep 7, 2006
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2664?
CVE-2004-2664 is considered a medium-severity vulnerability due to the potential exposure of sensitive information.
2
How do I fix CVE-2004-2664?
To fix CVE-2004-2664, upgrade ADOdb Library for PHP to version 4.23 or later.
3
Which versions of ADOdb are affected by CVE-2004-2664?
CVE-2004-2664 affects ADOdb versions from 3.94 to 4.22, including several specified releases.
4
What kind of information can be leaked due to CVE-2004-2664?
CVE-2004-2664 can leak sensitive information, specifically the installation path of the ADOdb library.
5
Can CVE-2004-2664 be exploited remotely?
Yes, CVE-2004-2664 can be exploited remotely through direct requests to certain vulnerable scripts.