CVE-2005-1451: High severity S9Y serendipity vulnerability
Published May 3, 2005
·Updated
The media manager in Serendipity before 0.8 allows remote attackers to upload and execute arbitrary (1) .php or (2) .shtml files.
Affected Software
13 affected components
S9Y serendipity=0.4
S9Y serendipity=0.7
S9Y serendipity=0.7_beta1
S9Y serendipity=0.8_beta_6
S9Y serendipity=0.7.1
S9Y serendipity=0.5_pl1
S9Y serendipity=0.7_beta3
S9Y serendipity=0.7_beta4
S9Y serendipity=0.8_beta_5
S9Y serendipity=0.3
S9Y serendipity=0.6_pl3
S9Y serendipity=0.7_beta2
S9Y serendipity=0.7_rc1
Remediation
Patch Available
Patch Available
Event History
May 3, 2005
CVE Published
04:00 AM
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1451?
CVE-2005-1451 is a high severity vulnerability that allows remote attackers to upload and execute arbitrary files.
2
How do I fix CVE-2005-1451?
To fix CVE-2005-1451, upgrade your Serendipity installation to version 0.8 or later.
3
Which versions of Serendipity are affected by CVE-2005-1451?
CVE-2005-1451 affects Serendipity versions from 0.3 to 0.7, including all beta and release candidate versions.
4
What type of files can be exploited in CVE-2005-1451?
CVE-2005-1451 can be exploited to upload and execute arbitrary .php or .shtml files.
5
Can CVE-2005-1451 be mitigated without upgrading?
Mitigation without upgrading is challenging, but you could restrict file uploads through web server configurations.