Executive Summary

Informations
NameCVE-2005-0129First vendor Publication2005-04-14
VendorCveLast vendor Modification2008-09-05

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score7.5Attack RangeNetwork
Cvss Impact Score6.4Attack ComplexityLow
Cvss Expoit Score10AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Security Protection

ImpactsProvides unauthorized access : Allows partial confidentiality, integrity, and availability violation; Allows unauthorized disclosure of information; Allows disruption of service.

Detail

The Quick Buttons feature in Konversation 0.15 allows remote attackers to execute certain IRC commands via a channel name containing "%" variables, which are recursively expanded by the Server::parseWildcards function when the Part Button is selected.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0129

CAPEC : Common Attack Pattern Enumeration & Classification

idName
CAPEC-15Command Delimiters

CWE : Common Weakness Enumeration

idName
CWE-154Improper Sanitization of Variable Name Delimiters

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

OpenVAS Exploits

DateDescription
2008-09-24Name : Gentoo Security Advisory GLSA 200501-34 (konversation)
File : nvt/glsa_200501_34.nasl
2008-09-04Name : FreeBSD Ports: konversation
File : nvt/freebsd_konversation.nasl

Open Source Vulnerability Database (OSVDB)

idDescription
13115Konversation Server::parseWildcards Function Channel Name Command Execution

Nessus® Vulnerability Scanner

DateDescription
2005-07-13Name : The remote FreeBSD host is missing a security-related update.
File : freebsd_pkg_5c7bb4dd6a5611d997ec000c6e8f12ef.nasl - Type : ACT_GATHER_INFO
2005-02-14Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-200501-34.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
BIDhttp://www.securityfocus.com/bid/12312
BUGTRAQhttp://marc.theaimsgroup.com/?l=bugtraq&m=110626383310742&w=2
CONFIRMhttp://www.kde.org/info/security/advisory-20050121-1.txt
FULLDISChttp://lists.grok.org.uk/pipermail/full-disclosure/2005-January/031033.html
GENTOOhttp://www.gentoo.org/security/en/glsa/glsa-200501-34.xml
SECTRACKhttp://securitytracker.com/id?1012972
SECUNIAhttp://secunia.com/advisories/13919
http://secunia.com/advisories/13989
XFhttp://xforce.iss.net/xforce/xfdb/19025

Alert History

If you want to see full details history, please login or register.
0
1
DateInformations
2014-02-17 10:29:48
  • Multiple Updates
2013-05-11 11:20:05
  • Multiple Updates