Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2005-1198

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Anaconda Foundation Directory的apexec.pl中存在目录遍历漏洞，允许远程攻击者通过template参数".."序列中间的十六进制编码的空字符(%00)来读取任意文件。

AI Predicted 7.5 Difficulty: Easy EPSS 1.47% · P71
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2005-1198

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Directory traversal vulnerability in apexec.pl for Anaconda Foundation Directory allows remote attackers to read arbitrary files via hex-encoded null characters (%00) in the middle of ".." sequences in the template parameter.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Anaconda Foundation Directory目录遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Anaconda Foundation Directory的apexec.pl中存在目录遍历漏洞，允许远程攻击者通过template参数".."序列中间的十六进制编码的空字符(%00)来读取任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2005-1198

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2005-1198

请登录查看更多情报信息。

Mailing List Discussions for CVE-2005-1198 (1)

Same Patch Batch · n/a · 2005-04-21 · 83 CVEs total

CVE-2001-1466 VanDyke SecureCRT缓冲区溢出漏洞
CVE-2001-1476 SSH用户密码猜测漏洞
CVE-2001-1463 SolarWinds Serv-U File Server 加密问题漏洞
CVE-2001-1464 Crystal Reports密码获得漏洞
CVE-2001-1462 RSA SecurID WebID调试方式信息泄露漏洞
CVE-2001-1459 OpenSSH PAM会话逃避漏洞
CVE-2001-1458 Novell Groupwise任意文件取回漏洞
CVE-2001-1457 CrazyWWWBoard缓冲区溢出漏洞
CVE-2001-1456 基于Unix的Gauntlet Firewall和WebShield CSMAP以及smap/smapd缓冲区溢出漏洞
CVE-2001-1460 PostNuke未认证的用户登录漏洞
CVE-2001-1465 SurfControl SuperScout绕过过滤漏洞
CVE-2001-1467 expect漏洞
CVE-2001-1468 phpSecurePages包括文件任意命令执行漏洞
CVE-2001-1469 SSH1 RC4消息修改漏洞
CVE-2001-1470 SSH1 IDEA密码无侦查块修改漏洞
CVE-2001-1471 phpBB Page Header远程任意命令执行漏洞
CVE-2001-1472 PHPBB远程SQL注入操作漏洞
CVE-2001-1473 SSH-1协议私钥计算漏洞
CVE-2001-1474 SSH连接重定向漏洞
CVE-2001-1475 SSH消息重放漏洞

Showing top 20 of 83 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2005-1198

No comments yet

Leave a comment