CVE-2005-1439: High severity osTicket osTicket vulnerability
Published May 3, 2005
·Updated
Directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter.
Affected Software
2 affected components
osTicket osTicket
Enhancesoft osTicket
Event History
May 3, 2005
CVE Published
04:00 AM
Data Sourced
via NVD·04:00 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1439?
CVE-2005-1439 is classified as a high-severity vulnerability due to its potential to allow unauthorized file access.
2
How does CVE-2005-1439 exploit the system?
CVE-2005-1439 exploits the system by allowing attackers to use directory traversal sequences to read arbitrary files.
3
Which versions of osTicket are affected by CVE-2005-1439?
CVE-2005-1439 affects all versions of osTicket prior to the patch that addresses this vulnerability.
4
How do I fix CVE-2005-1439?
To fix CVE-2005-1439, you should upgrade to the latest version of osTicket that addresses this vulnerability.
5
What types of attacks could be enabled by CVE-2005-1439?
CVE-2005-1439 could be exploited to read sensitive files on the server, leading to information disclosure.