CVE-2005-0690 Missing authorization in n/a
Local users can modify server configuration and gain privileges due to improper access restrictions on the control console.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-0690?
CVE-2005-0690 is a low-severity missing authorization vulnerability in n/a, published on 8 Mar 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Gene6 FTP Server does not properly restrict access to the control console, which allows local users to modify the server configuration and gain privileges, as demonstrated by defining a SITE command.
Which versions are affected by CVE-2005-0690?
It affects 1 product.
Products include Gene6 G6 Ftp Server.
How do I fix CVE-2005-0690?
No fix has been published for CVE-2005-0690 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2005-0690 being exploited?
There is no known exploitation of CVE-2005-0690 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-7jh8-r88f-fh75.