Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-3355

Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI parameters, and cookie values".

Published

2005-11-18T22:03:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

10.0

Impact Score

4.9

Weaknesses

Type: Primary
CWE-22

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	gnu	gnump3d	2.9	Yes
Application	gnu	gnump3d	2.9.1	Yes
Application	gnu	gnump3d	2.9.2	Yes
Application	gnu	gnump3d	2.9.3	Yes
Application	gnu	gnump3d	2.9.4	Yes
Application	gnu	gnump3d	2.9.5	Yes
Application	gnu	gnump3d	2.9.6	Yes
Application	gnu	gnump3d	2.9.7	Yes

References

http://secunia.com/advisories/17646 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/17647 Patch, Vendor Advisory ([email protected])
http://secunia.com/advisories/17656 Patch, Vendor Advisory ([email protected])
http://www.debian.org/security/2005/dsa-901 Patch ([email protected])
http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml Patch ([email protected])
http://www.gnu.org/software/gnump3d/ChangeLog ([email protected])
http://www.novell.com/linux/security/advisories/2005_28_sr.html Patch, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/15496 Patch ([email protected])
http://www.vupen.com/english/advisories/2005/2489 Vendor Advisory ([email protected])
http://secunia.com/advisories/17646 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/17647 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/17656 Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.debian.org/security/2005/dsa-901 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.gentoo.org/security/en/glsa/glsa-200511-16.xml Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.gnu.org/software/gnump3d/ChangeLog (af854a3a-2127-422b-91ae-364da2661108)
http://www.novell.com/linux/security/advisories/2005_28_sr.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/15496 Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.vupen.com/english/advisories/2005/2489 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)