CVE-2005-0987漏洞详情 - SCAP中文社区

CVE-2005-0987

CVSS

5.0

发布时间 :2005-05-02 00:00:00

修订时间 :2008-09-05 16:47:52

NMCO

[原文]Unknown vulnerability in IRC Services NickServ LISTLINKS before 5.0.50 allows remote attackers to obtain the links of a nick.

[CNNVD]IRC Services NickServ LISTLINKS 未知漏洞(CNNVD-200505-210)

IRC Services NickServ LISTLINKS 5.0.50之前版本中的未知漏洞，允许远程攻击者获取多个nick链接。

NVD
CNNVD
OSVDB

- CVSS (基础分值)

CVSS分值:	5	[中等(MEDIUM)]
机密性影响:	PARTIAL	[很可能造成信息泄露]
完整性影响:	NONE	[不会对系统完整性产生影响]
可用性影响:	NONE	[对系统可用性无影响]
攻击复杂度:	LOW	[漏洞利用没有访问限制 ]
攻击向量:		[--]
身份认证:	NONE	[漏洞利用无需身份认证]

- CPE (受影响的平台与产品)

cpe:/a:irc_services:nickserv_listlinks:5.0.45
cpe:/a:irc_services:nickserv_listlinks:5.0.36
cpe:/a:irc_services:nickserv_listlinks:5.0.6
cpe:/a:irc_services:nickserv_listlinks:5.0.24
cpe:/a:irc_services:nickserv_listlinks:5.0.26
cpe:/a:irc_services:nickserv_listlinks:5.0.12
cpe:/a:irc_services:nickserv_listlinks:5.0.16
cpe:/a:irc_services:nickserv_listlinks:5.0.13
cpe:/a:irc_services:nickserv_listlinks:5.0.20
cpe:/a:irc_services:nickserv_listlinks:5.0.14
cpe:/a:irc_services:nickserv_listlinks:5.0.3
cpe:/a:irc_services:nickserv_listlinks:5.0.18
cpe:/a:irc_services:nickserv_listlinks:5.0.15
cpe:/a:irc_services:nickserv_listlinks:5.0.25
cpe:/a:irc_services:nickserv_listlinks:5.0.49
cpe:/a:irc_services:nickserv_listlinks:5.0.17
cpe:/a:irc_services:nickserv_listlinks:5.0.9
cpe:/a:irc_services:nickserv_listlinks:5.0.37
cpe:/a:irc_services:nickserv_listlinks:5.0.21
cpe:/a:irc_services:nickserv_listlinks:5.0.46
cpe:/a:irc_services:nickserv_listlinks:5.0.23
cpe:/a:irc_services:nickserv_listlinks:5.0.38
cpe:/a:irc_services:nickserv_listlinks:5.0.8
cpe:/a:irc_services:nickserv_listlinks:5.0.5
cpe:/a:irc_services:nickserv_listlinks:5.0.47
cpe:/a:irc_services:nickserv_listlinks:5.0.44
cpe:/a:irc_services:nickserv_listlinks:5.0.27
cpe:/a:irc_services:nickserv_listlinks:5.0.48
cpe:/a:irc_services:nickserv_listlinks:5.0.22
cpe:/a:irc_services:nickserv_listlinks:5.0.32
cpe:/a:irc_services:nickserv_listlinks:5.0.28
cpe:/a:irc_services:nickserv_listlinks:5.0.4
cpe:/a:irc_services:nickserv_listlinks:5.0.35
cpe:/a:irc_services:nickserv_listlinks:5.0.10
cpe:/a:irc_services:nickserv_listlinks:5.0.30
cpe:/a:irc_services:nickserv_listlinks:5.0.1
cpe:/a:irc_services:nickserv_listlinks:5.0.33
cpe:/a:irc_services:nickserv_listlinks:5.0.11
cpe:/a:irc_services:nickserv_listlinks:5.0.42
cpe:/a:irc_services:nickserv_listlinks:5.0.40
cpe:/a:irc_services:nickserv_listlinks:5.0.0
cpe:/a:irc_services:nickserv_listlinks:5.0.39
cpe:/a:irc_services:nickserv_listlinks:5.0.43
cpe:/a:irc_services:nickserv_listlinks:5.0.7
cpe:/a:irc_services:nickserv_listlinks:5.0.19
cpe:/a:irc_services:nickserv_listlinks:5.0.34
cpe:/a:irc_services:nickserv_listlinks:5.0.2
cpe:/a:irc_services:nickserv_listlinks:5.0.41
cpe:/a:irc_services:nickserv_listlinks:5.0.31
cpe:/a:irc_services:nickserv_listlinks:5.0.29

- OVAL (用于检测的技术细节)

未找到相关OVAL定义

- 官方数据库链接

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0987 (官方数据源) MITRE
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-0987 (官方数据源) NVD
http://www.cnnvd.org.cn/vulnerability/show/cv_cnnvdid/CNNVD-200505-210 (官方数据源) CNNVD

- 其它链接及资源

http://securitytracker.com/id?1013622
(PATCH) SECTRACK 1013622

http://www.ircservices.esper.net/Changes.txt
(UNKNOWN) CONFIRM http://www.ircservices.esper.net/Changes.txt

- 漏洞信息

漏洞名称:IRC Services NickServ LISTLINKS 未知漏洞
紧急程度:中危	漏洞类型:未知
发布日期:2005-05-02 00:00:00	更新日期:2005-10-20 00:00:00
攻击路径:远程
详细介绍:
IRC Services NickServ LISTLINKS 5.0.50之前版本中的未知漏洞，允许远程攻击者获取多个nick链接。

- 公告与补丁

暂无数据

- 漏洞信息

OSVDBID: 15180
漏洞名称:IRC Services NickServ LISTLINKS Link Disclosure
漏洞位置: Remote / Network Access	利用方式: Information Disclosure
漏洞影响:Loss of Confidentiality	解决方式:
漏洞利用:Exploit Unknown	公开方式:Vendor Verified

- 漏洞描述

IRC Services contains a flaw that may allow a user to view the list of links for a nickname without identifying for the nickname. No further details have been provided.

- 时间线

公开日期: 2005-03-29	发现日期: Unknow
利用日期:Unknow	解决日期:Unknow

- 解决方案

Upgrade to version 5.0.50 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

- 相关参考

Security Tracker: 1013622
CVE ID: 2005-0987 (see also: NVD)
Vendor URL: http://www.ircservices.esper.net/
Vendor Specific News/Changelog Entry: http://www.ircservices.esper.net/Changes.txt

- 漏洞作者

Unknown or Incomplete

CVE数据库

检索CVE

关于CVE

CVE资源

Wise Words

生活只有在平淡无味的人看来才是空虚而平淡无味的。

-- 车尔尼雪夫斯基

关于SCAP中文社区

SCAP中文社区是国内第一个以SCAP为主题的中文开放社区。了解更多信息，请查阅[关于本站]。

版权声明

CVE/CWE/OVAL均为MITRE公司的注册商标，它们的官方数据源均保存在MITRE公司的相关网站。

CVE 通用漏洞与披露Common Vulnerabilities and Exposures

- CVSS (基础分值)

- CPE (受影响的平台与产品)

- OVAL (用于检测的技术细节)

- 官方数据库链接

- 其它链接及资源

- 漏洞信息

- 公告与补丁

- 漏洞信息

- 漏洞描述

- 时间线

- 解决方案

- 相关参考

- 漏洞作者

CVE数据库

检索CVE

关于CVE

CVE资源

Wise Words

关于SCAP中文社区

版权声明