CVE-2005-0391 Path traversal in n/a
Attackers can modify arbitrary files due to improper permission checks during conversion in GeneWeb, requiring an upgrade to mitigate.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2005-0391?
CVE-2005-0391 is a medium-severity path traversal vulnerability in n/a, published on 19 Apr 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
geneweb 4.10 and earlier does not properly check file permissions and content during conversion, which allows attackers to modify arbitrary files.
Which versions are affected by CVE-2005-0391?
It affects 1 product.
Products include Daniel De Rauglaudre Geneweb.
How do I fix CVE-2005-0391?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2005-0391 being exploited?
There is no known exploitation of CVE-2005-0391 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2005-0391, DSA-712-1, GHSA-mm47-94wr-2g3f.