CVE-2005-2259
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2005-07-13 CVE Reserved
- 2005-07-13 CVE Published
- 2024-06-19 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/15985 | Third Party Advisory | |
| http://www.securityfocus.com/bid/14179 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://securitytracker.com/id?1014411 | 2008-09-05 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Usanet Creations Search vendor "Usanet Creations" | Domain Name Auction Search vendor "Usanet Creations" for product "Domain Name Auction" | * | - |
Affected
| ||||||
| Usanet Creations Search vendor "Usanet Creations" | Makebid Auction Deluxe Search vendor "Usanet Creations" for product "Makebid Auction Deluxe" | * | - |
Affected
| ||||||
| Usanet Creations Search vendor "Usanet Creations" | Makebid Auction Deluxe Search vendor "Usanet Creations" for product "Makebid Auction Deluxe" | 3.30 Search vendor "Usanet Creations" for product "Makebid Auction Deluxe" and version "3.30" | - |
Affected
| ||||||
| Usanet Creations Search vendor "Usanet Creations" | Makebid Auction Standard Search vendor "Usanet Creations" for product "Makebid Auction Standard" | * | - |
Affected
| ||||||
| Usanet Creations Search vendor "Usanet Creations" | Makebid Reverse Auction Search vendor "Usanet Creations" for product "Makebid Reverse Auction" | * | - |
Affected
| ||||||
| Usanet Creations Search vendor "Usanet Creations" | Standard Classified Ads Search vendor "Usanet Creations" for product "Standard Classified Ads" | * | - |
Affected
| ||||||
| Usanet Creations Search vendor "Usanet Creations" | Usanet Shopping Mall Search vendor "Usanet Creations" for product "Usanet Shopping Mall" | * | - |
Affected
| ||||||