CVE-2005-3502: Medium severity cerberus cerberus helpdesk vulnerability
Published Nov 5, 2005
·Updated
attachmentsend.php in Cerberus Helpdesk allows remote attackers to view attachments and tickets of other users via a modified fileid parameter.
Affected Software
7 affected components
Cerberus Cerberus Helpdesk=2.0
Cerberus Cerberus Helpdesk=2.1
Cerberus Cerberus Helpdesk=2.2
Cerberus Cerberus Helpdesk=2.3
Cerberus Cerberus Helpdesk=2.4
Cerberus Cerberus Helpdesk=2.5
Cerberus Cerberus Helpdesk=2.6.1
Event History
Nov 5, 2005
CVE Published
11:02 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3502?
CVE-2005-3502 has a medium severity rating due to unauthorized information disclosure.
2
How does CVE-2005-3502 affect Cerberus Helpdesk?
CVE-2005-3502 allows remote attackers to view attachments and tickets of other users through manipulation of the file_id parameter.
3
Which versions of Cerberus Helpdesk are affected by CVE-2005-3502?
CVE-2005-3502 affects Cerberus Helpdesk versions 2.0 to 2.6.1.
4
How can I protect my system from CVE-2005-3502?
To protect against CVE-2005-3502, upgrade to a patched version of Cerberus Helpdesk that addresses this vulnerability.
5
What are the potential impacts of CVE-2005-3502?
The potential impacts of CVE-2005-3502 include unauthorized access to sensitive user information and ticketing data.