CVE-2005-1851: Critical severity ekg ekg vulnerability

Published Jul 19, 2005

Updated

A certain contributed script for ekg Gadu Gadu client 1.5 and earlier allows attackers to execute shell commands via unknown attack vectors.

Affected Software

11 affected components

ekg ekg=1.0

ekg ekg=1.0_rc2

ekg ekg=1.0_rc3

ekg ekg=1.1

ekg ekg=1.1_rc1

ekg ekg=1.1_rc2

ekg ekg=1.3

ekg ekg=1.4

ekg ekg=1.5

ekg ekg=1.5_rc1

ekg ekg=1.5_rc2

Remediation

Patch Available

http://www.debian.org/security/2005/dsa-760

Event History

Jul 19, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1851?

CVE-2005-1851 is classified as a high severity vulnerability due to its potential to allow attackers to execute arbitrary shell commands.

How do I fix CVE-2005-1851?

To fix CVE-2005-1851, it is recommended to upgrade to a newer version of the ekg Gadu Gadu client that addresses this vulnerability.

Which versions of ekg are affected by CVE-2005-1851?

CVE-2005-1851 affects ekg versions 1.0, 1.1, 1.3, 1.4, and 1.5, including their release candidates.

What are the potential impacts of CVE-2005-1851?

The potential impacts of CVE-2005-1851 include unauthorized access to the system and execution of malicious commands.

Is there a workaround for CVE-2005-1851?

While upgrading is the best solution, temporarily restricting access to the ekg client can serve as a workaround until a patch is applied.