Remote Code Execution Vulnerability in Exponent CMS by Exponent Web Technologies
CVE-2005-3765

Currently unrated

Key Information:

Vendor

Exponent

Status
Exponent
Vendor
CVE Published:
22 November 2005

What is CVE-2005-3765?

The vulnerability in Exponent CMS allows uploaded files to be granted execute permissions due to a permissive chmod operation on these files. This misconfiguration enables attackers to potentially execute arbitrary code remotely, posing significant risks to servers running the affected versions of Exponent CMS. Proper security measures should be implemented to restrict file permissions and mitigate exploitation risks.

References

http://www.securityfocus.com/archive/1/417218
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/15503
vdb-entryx_refsource_BID
http://secunia.com/advisories/17655
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.