CVE-2005-4033 Information disclosure in n/a
Remote attackers can access sensitive data in the evl_data directory if the PRIVATEDATADIR setting is not configured in nodezilla.ini.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-4033?
CVE-2005-4033 is a medium-severity vulnerability in n/a, published on 6 Dec 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Nodezilla 0.4.13-corno-fulgure does not properly protect the evl_data directory, which could allow them to be shared when they are not protected by PRIVATEDATADIR in nodezilla.ini, which allows remote attackers to obtain sensitive information.
Which versions are affected by CVE-2005-4033?
It affects 1 product.
Products include Ali Bousahid Nodezilla.
How do I fix CVE-2005-4033?
No fix has been published for CVE-2005-4033 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-4033 being exploited?
There is no known exploitation of CVE-2005-4033 in the wild and no public exploit code.
Sources
Also known as GHSA-j22h-wh6q-9q3g.