CVE-2005-4514: Medium severity Webwasher CSM Appliance Suite vulnerability

Published Dec 23, 2005

Updated

DISPUTED The encapsulation script mechanism in Webwasher CSM Appliance Suite 5.x uses case-sensitive detection of malicious tokens, which allows attackers to bypass script detection by using tokens that can be upper or lower case. NOTE: the vendor has stated that this problem could not be reproduced, and has asked the researcher for more information, without a response as of 20060103.

Affected Software

1 affected component

Webwasher CSM Appliance Suite=5.0

Event History

Dec 23, 2005

CVE Published

01:03 AM

Disputed

01:03 AM

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-4514?

The severity of CVE-2005-4514 is medium, rated at 5.

How do I fix CVE-2005-4514?

There is no official fix for CVE-2005-4514 as the issue is disputed by the vendor.

What does CVE-2005-4514 involve?

CVE-2005-4514 involves a vulnerability in the Webwasher CSM Appliance Suite that allows malicious script detection to be bypassed using case-sensitive tokens.

Is CVE-2005-4514 confirmed or disputed?

CVE-2005-4514 is currently marked as disputed by the vendor.

What software is affected by CVE-2005-4514?

CVE-2005-4514 affects the Webwasher CSM Appliance Suite version 5.x.