CVE-2005-1963: Medium severity cerberus cerberus helpdesk vulnerability

Published Jun 14, 2005

Updated

Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which leaks the information in a PHP error message.

Affected Software

1 affected component

Cerberus Cerberus Helpdesk=0.97.3

Event History

Jun 14, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1963?

CVE-2005-1963 is considered a medium severity vulnerability due to the exposure of sensitive information.

How do I fix CVE-2005-1963?

To fix CVE-2005-1963, ensure that all access to reports.php, knowledgebase.php, and configuration.php is restricted to authorized users only.

What information can be exposed by CVE-2005-1963?

CVE-2005-1963 can lead to exposure of sensitive information such as configuration settings and database credentials through PHP error messages.

Which software versions are affected by CVE-2005-1963?

CVE-2005-1963 specifically affects Cerberus Helpdesk version 0.97.3.

Is CVE-2005-1963 exploitable remotely?

Yes, CVE-2005-1963 is exploitable remotely, allowing attackers to access sensitive information without local access.