CVE-2005-3021: Low severity Jelsoft vBulletin vulnerability
Published Sep 21, 2005
·Updated
image.php in vBulletin 3.0.9 and earlier allows remote attackers with access to the administrator panel to upload arbitrary files via the upload action.
Affected Software
35 affected components
Jelsoft vBulletin=1.0.1
Jelsoft vBulletin=2.0.3
Jelsoft vBulletin=2.0_rc2
Jelsoft vBulletin=2.0_rc3
Jelsoft vBulletin=2.2.0
Jelsoft vBulletin=2.2.1
Jelsoft vBulletin=2.2.2
Jelsoft vBulletin=2.2.3
Jelsoft vBulletin=2.2.4
Jelsoft vBulletin=2.2.5
Jelsoft vBulletin=2.2.6
Jelsoft vBulletin=2.2.7
Jelsoft vBulletin=2.2.8
Jelsoft vBulletin=2.2.9
Jelsoft vBulletin=2.3.0
Jelsoft vBulletin=2.3.2
Jelsoft vBulletin=2.3.3
Jelsoft vBulletin=2.3.4
Jelsoft vBulletin=3.0
Jelsoft vBulletin=3.0.1
Jelsoft vBulletin=3.0.2
Jelsoft vBulletin=3.0.3
Jelsoft vBulletin=3.0.4
Jelsoft vBulletin=3.0.5
Jelsoft vBulletin=3.0.6
Jelsoft vBulletin=3.0.7
Jelsoft vBulletin=3.0.8
Jelsoft vBulletin=3.0.9
Jelsoft vBulletin=3.0_beta_2
Jelsoft vBulletin=3.0_beta_3
Jelsoft vBulletin=3.0_beta_4
Jelsoft vBulletin=3.0_beta_5
Jelsoft vBulletin=3.0_beta_6
Jelsoft vBulletin=3.0_beta_7
Jelsoft vBulletin=3.0_gamma
Remediation
Patch Available
Patch Available
Event History
Sep 21, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3021?
CVE-2005-3021 has a severity rating of high due to the potential for remote attackers to upload arbitrary files.
2
How do I fix CVE-2005-3021?
To fix CVE-2005-3021, you should upgrade vBulletin to version 3.0.10 or later, where the vulnerability has been addressed.
3
Which versions of vBulletin are affected by CVE-2005-3021?
CVE-2005-3021 affects vBulletin versions 3.0.9 and earlier.
4
What type of attack does CVE-2005-3021 enable?
CVE-2005-3021 enables remote file upload attacks, potentially allowing attackers to execute malicious files.
5
Is there a workaround for CVE-2005-3021 if I cannot update immediately?
As a temporary workaround for CVE-2005-3021, restrict access to the administrator panel to trusted IP addresses.