CVE-2005-0299: Medium severity gforge gforge vulnerability
Published Feb 10, 2005
·Updated
Directory traversal vulnerability in GForge 3.3 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the (1) dir parameter to controller.php or (2) dirname parameter to controlleroo.php.
Affected Software
4 affected components
GForge=3.1
GForge=3.2
GForge=3.3
GForge=3.21
Remediation
Patch Available
Event History
Feb 10, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0299?
CVE-2005-0299 has a moderate severity level due to its ability to allow directory traversal attacks.
2
How do I fix CVE-2005-0299?
To fix CVE-2005-0299, upgrade GForge to version 3.4 or later, which addresses this vulnerability.
3
What versions of GForge are affected by CVE-2005-0299?
CVE-2005-0299 affects GForge versions 3.1, 3.2, 3.3, and 3.21.
4
What kind of attack can exploit CVE-2005-0299?
CVE-2005-0299 can be exploited by remote attackers to list arbitrary directories on the server.
5
Is CVE-2005-0299 a critical vulnerability?
CVE-2005-0299 is not considered critical, but it poses a risk of unauthorized directory access.