CVE-2005-3630
Last modified
CVE-2005-3630 is a vulnerability of currently unknown severity. Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.. EPSS estimates a 1.39% chance of exploitation in the next 30 days.
Description
Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Fedora Core | 1.0 |
References
- http://secunia.com/advisories/18939Patch, Vendor Advisory
- http://secunia.com/advisories/18939Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-3630?
How severe is CVE-2005-3630?
How do I fix CVE-2005-3630?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-3624The CCITTFaxStream::CCITTFaxStream function in Stream.cc for…
- CVE-2005-3625Xpdf, as used in products such as gpdf, kpdf, pdftohtml, pop…
- CVE-2005-3626Xpdf, as used in products such as gpdf, kpdf, pdftohtml, pop…
- CVE-2005-3627Stream.cc in Xpdf, as used in products such as gpdf, kpdf, p…
- CVE-2005-3628Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in …
- CVE-2005-3629initscripts in Red Hat Enterprise Linux 4 does not properly …
- CVE-2005-3631udev does not properly set permissions on certain files in /…
- CVE-2005-3632Multiple buffer overflows in pnmtopng in netpbm 10.0 and ear…
- CVE-2005-3633HTTP response splitting vulnerability in frameset.htm in SAP…
- CVE-2005-3634frameset.htm in the BSP runtime in SAP Web Application Serve…
- CVE-2005-3635Multiple cross-site scripting (XSS) vulnerabilities in SAP W…
- CVE-2005-3636Cross-site scripting (XSS) vulnerability in SAP Web Applicat…
Are you affected by CVE-2005-3630?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST