CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
7.0 | $0-$5k | 0.00 |
A vulnerability, which was classified as critical, has been found in CVS. This issue affects an unknown code block. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is confidentiality, integrity, and availability. The summary by CVE is:
CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method.
The bug was discovered 04/27/2005. The weakness was shared 04/27/2005 by Alberto Garcia (Website). It is possible to read the advisory at debian.org. The identification of this vulnerability is CVE-2004-1342 since 01/06/2005. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available.
The vulnerability scanner Nessus provides a plugin with the ID 18151 (Debian DSA-715-1 : cvs - several vulnerabilities), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Debian Local Security Checks and running in the context l.
Upgrading eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (20282) and Tenable (18151). The entry 22680 is related to this item.
Product
Name
Version
- 1.10
- 1.10.6
- 1.10.7
- 1.10.8
- 1.11
- 1.11.1
- 1.11.1 P1
- 1.11.2
- 1.11.3
- 1.11.4
- 1.11.5
- 1.11.6
- 1.11.10
- 1.11.11
- 1.11.14
- 1.11.15
- 1.11.16
- 1.12
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.3VulDB Meta Temp Score: 7.0
VulDB Base Score: 7.3
VulDB Temp Score: 7.0
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Denial of serviceCWE: CWE-404
CAPEC: 🔍
ATT&CK: 🔍
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Nessus ID: 18151
Nessus Name: Debian DSA-715-1 : cvs - several vulnerabilities
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Nessus Context: 🔍
Nessus Port: 🔍
OpenVAS ID: 53543
OpenVAS Name: Debian Security Advisory DSA 715-1 (cvs)
OpenVAS File: 🔍
OpenVAS Family: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Timeline
01/06/2005 🔍04/27/2005 🔍
04/27/2005 🔍
04/27/2005 🔍
04/27/2005 🔍
04/27/2005 🔍
04/27/2005 🔍
04/28/2005 🔍
05/04/2005 🔍
03/10/2015 🔍
06/01/2019 🔍
Sources
Advisory: debian.orgResearcher: Alberto Garcia
Status: Not defined
CVE: CVE-2004-1342 (🔍)
X-Force: 20282
Vulnerability Center: 7780 - CVS < 1.11.1p1 Allows Bypass of User Authentication, High
SecurityFocus: 13402 - Debian CVS-Repouid Remote Authentication Bypass Vulnerability
OSVDB: 15887 - CVE-2004-1342 - CVS - Authentication Bypass Issue
See also: 🔍
Entry
Created: 03/10/2015 23:05Updated: 06/01/2019 06:58
Changes: 03/10/2015 23:05 (66), 06/01/2019 06:58 (8)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.