CVE-2005-3630 Information disclosure in n/a

Medium 5.0 Published 24 Feb 2006 Updated 17 Sep 2024

Remote attackers can read sensitive configuration files like passwords via IFRAME injection due to misordered Apache allow/deny directives.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2005-3630?

CVE-2005-3630 is a medium-severity vulnerability in Redhat Fedora Core, published on 24 Feb 2006. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.

Which versions are affected by CVE-2005-3630?

It affects 1 product.

Products include Redhat Fedora Core.

How do I fix CVE-2005-3630?

No fix has been published for CVE-2005-3630 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-3630 being exploited?

There is no known exploitation of CVE-2005-3630 in the wild and no public exploit code.

All Redhat Fedora Core vulnerabilities

Sources

Also known as GHSA-5q24-6jhj-mv45.