CVE-2005-3405: High severity adaptive technology resource centre atutor vulnerability
Published Nov 1, 2005
·Updated
ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the (1) asc or (2) desc parameters set, possibly due to an eval injection vulnerability.
Affected Software
10 affected components
Adaptive Technology Resource Centre Atutor=1.4.2
Adaptive Technology Resource Centre Atutor=1.5.1
Adaptive Technology Resource Centre Atutor=1.4.1
Adaptive Technology Resource Centre Atutor=1.5.1_pl1
Adaptive Technology Resource Centre Atutor=1.4.3
Adaptive Technology Resource Centre Atutor=1.4.1
Adaptive Technology Resource Centre Atutor=1.4.2
Adaptive Technology Resource Centre Atutor=1.4.3
Adaptive Technology Resource Centre Atutor=1.5.1
Adaptive Technology Resource Centre Atutor=1.5.1_pl1
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Nov 1, 2005
CVE Published
12:47 PM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3405?
CVE-2005-3405 has a critical severity rating due to the potential for remote code execution.
2
How do I fix CVE-2005-3405?
To fix CVE-2005-3405, upgrade ATutor to version 1.5.1 or later, or apply available security patches.
3
What versions of ATutor are affected by CVE-2005-3405?
CVE-2005-3405 affects ATutor versions 1.4.1 through 1.5.1-pl1.
4
Can CVE-2005-3405 be exploited remotely?
Yes, CVE-2005-3405 can be exploited remotely by attackers through specifically crafted requests.
5
What type of vulnerability is CVE-2005-3405?
CVE-2005-3405 is an eval injection vulnerability that allows arbitrary PHP function execution.