CVE-2005-3404: High severity adaptive technology resource centre atutor vulnerability
Published Nov 1, 2005
·Updated
Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte (%00) in (1) bodyheader.inc.php and (2) print.php.
Affected Software
5 affected components
Adaptive Technology Resource Centre Atutor=1.4.1
Adaptive Technology Resource Centre Atutor=1.4.2
Adaptive Technology Resource Centre Atutor=1.4.3
Adaptive Technology Resource Centre Atutor=1.5.1
Adaptive Technology Resource Centre Atutor=1.5.1_pl1
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Nov 1, 2005
CVE Published
12:47 PM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3404?
CVE-2005-3404 is considered a high severity vulnerability due to its potential to allow remote file inclusion.
2
How do I fix CVE-2005-3404?
To fix CVE-2005-3404, update ATutor to version 1.5.1-pl2 or later, which addresses the file inclusion vulnerabilities.
3
What versions of ATutor are affected by CVE-2005-3404?
CVE-2005-3404 affects ATutor versions 1.4.1 through 1.5.1-pl1.
4
What types of attacks can CVE-2005-3404 allow?
CVE-2005-3404 can allow remote attackers to include arbitrary files on the server, leading to potential code execution.
5
Is CVE-2005-3404 easily exploitable?
Yes, CVE-2005-3404 can be easily exploited by attackers knowledgeable in PHP and file inclusion vulnerabilities.