CVE-2005-1892

Name: CVE-2005-1892
Creator: NVD / NIST
Published: 2005-06-09T04:00:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.16%

Last modified Jun 16, 2026

CVE-2005-1892 is a vulnerability of currently unknown severity. FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests to unknown scripts, which reveals the web document root in an error message.. EPSS estimates a 2.16% chance of exploitation in the next 30 days.

Description

FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot_news.php, which triggers an infinite loop, or (2) direct requests to unknown scripts, which reveals the web document root in an error message.

Metrics

EPSS Probability

2.16%

79.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-425

Affected Software

Vendor	Product	Versions
Flatnuke	Flatnuke	<= 2.5.3

References

http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256Product
http://secunia.com/advisories/15603Broken Link
http://securitytracker.com/id?1014114Broken Link, Exploit, Third Party Advisory, VDB Entry
http://secwatch.org/advisories/secwatch/20050604_flatnuke.txtBroken Link, Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2005/0697Broken Link
http://flatnuke.sourceforge.net/index.php?mod=read&id=1117979256Product
http://secunia.com/advisories/15603Broken Link
http://securitytracker.com/id?1014114Broken Link, Exploit, Third Party Advisory, VDB Entry
http://secwatch.org/advisories/secwatch/20050604_flatnuke.txtBroken Link, Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2005/0697Broken Link

Timeline

Published: Jun 9, 2005
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2005-1892?

How severe is CVE-2005-1892?

Severity scoring for CVE-2005-1892 is pending analysis. The EPSS model estimates a 2.16% probability of exploitation in the next 30 days.

How do I fix CVE-2005-1892?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2005-1892?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST