Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2005-2609
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2005-2609

Description:
index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path via an invalid VDNS_Sessid parameter.

CVE Status:
Candidate

References:

SAID
  Secunia Advisory: SA16370

MISC
  http://www.packetstormsecurity.org/0508-exploits/vegadns-dyn0.txt

CONFIRM
  http://vegadns.org/src/current/CHANGELOG


Return to the previous page.