Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2004-1385
Deferred
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-31 Dec, 2004 | 05:00
Updated At-03 Apr, 2025 | 01:03

phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1) unexpected characters in the session ID such as shell metacharacters, (2) an invalid appname parameter to preferences.php or (3) an invalid menuaction parameter to index.php, which reveals the web server path in an error message.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
Type: Primary
Version: 2.0
Base score: 5.0
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N
CPE Matches
phpgroupware
phpgroupware
>>phpgroupware>>0.9.12
cpe:2.3:a:phpgroupware:phpgroupware:0.9.12:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.13
cpe:2.3:a:phpgroupware:phpgroupware:0.9.13:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.14
cpe:2.3:a:phpgroupware:phpgroupware:0.9.14:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.14.003
cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.003:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.14.005
cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.005:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.14.006
cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.006:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.14.007
cpe:2.3:a:phpgroupware:phpgroupware:0.9.14.007:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.16.000
cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.16.002
cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.16.003
cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*
phpgroupware
phpgroupware
>>phpgroupware>>0.9.16_rc1
cpe:2.3:a:phpgroupware:phpgroupware:0.9.16_rc1:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-OtherPrimarynvd@nist.gov
CWE ID: NVD-CWE-Other
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://marc.info/?l=bugtraq&m=110312656029072&w=2cve@mitre.org
N/A
http://www.gentoo.org/security/en/glsa/glsa-200501-08.xmlcve@mitre.org
Patch
http://www.gulftech.org/?node=research&article_id=00054-12142004cve@mitre.org
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18497cve@mitre.org
N/A
http://marc.info/?l=bugtraq&m=110312656029072&w=2af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.gentoo.org/security/en/glsa/glsa-200501-08.xmlaf854a3a-2127-422b-91ae-364da2661108
Patch
http://www.gulftech.org/?node=research&article_id=00054-12142004af854a3a-2127-422b-91ae-364da2661108
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/18497af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://marc.info/?l=bugtraq&m=110312656029072&w=2
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml
Source: cve@mitre.org
Resource:
Patch
Hyperlink: http://www.gulftech.org/?node=research&article_id=00054-12142004
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/18497
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://marc.info/?l=bugtraq&m=110312656029072&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Patch
Hyperlink: http://www.gulftech.org/?node=research&article_id=00054-12142004
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/18497
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found