CVE

Id
10470  
CVE No.
CVE-2004-2044  
Status
Candidate  
Description
PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER["PHP_SELF"] to identify the calling script, which allows remote attackers to directly access scripts, obtain path information via a PHP error message, and possibly gain access, as demonstrated using an HTTP request that contains the "admin.php" string.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
72640 10470 CVE-2004-2044 BUGTRAQ:20040601 [Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke  View
72641 10470 CVE-2004-2044 URL:http://marc.info/?l=bugtraq&m=108611643614881&w=2  View
72642 10470 CVE-2004-2044 BUGTRAQ:20040601 [Squid 2004-OSC2Nuke-001] Inadequate Security Checking in OSC2Nuke  View
72643 10470 CVE-2004-2044 URL:http://archives.neohapsis.com/archives/bugtraq/2004-06/0006.html  View
72644 10470 CVE-2004-2044 BUGTRAQ:20040606 Re: [Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke  View
72645 10470 CVE-2004-2044 URL:http://marc.info/?l=bugtraq&m=108662955105757&w=2  View
72646 10470 CVE-2004-2044 BUGTRAQ:20040601 [Squid 2004-betaNC-001] Inadequate Security Checking in NukeCops  View
72647 10470 CVE-2004-2044 URL:http://marc.info/?l=bugtraq&m=108611606320559&w=2  View
72648 10470 CVE-2004-2044 BUGTRAQ:20040601 [Squid 2004-betaNC-001] Inadequate Security Checking in NukeCops betaNC Bundle  View
72649 10470 CVE-2004-2044 URL:http://archives.neohapsis.com/archives/bugtraq/2004-06/0005.html  View
72650 10470 CVE-2004-2044 BID:10447  View
72651 10470 CVE-2004-2044 URL:http://www.securityfocus.com/bid/10447  View
72652 10470 CVE-2004-2044 OSVDB:6593  View
72653 10470 CVE-2004-2044 URL:http://www.osvdb.org/6593  View
72654 10470 CVE-2004-2044 SECUNIA:11766  View
72655 10470 CVE-2004-2044 URL:http://secunia.com/advisories/11766  View
72656 10470 CVE-2004-2044 XF:osc2nuke-eregi-path-disclosure(16296)  View
72657 10470 CVE-2004-2044 URL:http://xforce.iss.net/xforce/xfdb/16296  View
72658 10470 CVE-2004-2044 XF:oscnukelite-eregi-path-disclosure(16297)  View
72659 10470 CVE-2004-2044 URL:http://xforce.iss.net/xforce/xfdb/16297  View
72660 10470 CVE-2004-2044 XF:phpnuke-eregi-path-disclosure(16294)  View
72661 10470 CVE-2004-2044 URL:http://xforce.iss.net/xforce/xfdb/16294  View
72662 10470 CVE-2004-2044 XF:nukecops-ergei-path-disclosure(16298)  View

Related JVN