CVE-2005-3630 | BDVDB-2026-15332 Detail

Description#

Fedora Directory Server before 10 allows remote attackers to obtain sensitive information, such as the password from adm.conf via an IFRAME element, probably involving an Apache httpd.conf configuration that orders "allow" directives before "deny" directives.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://directory.fedora.redhat.com/wiki/FDS10Announcement
http://www.securityfocus.com/bid/16729
https://bugzilla.redhat.com/bugzilla/attachment.cgi?id=121994
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=174837
http://secunia.com/advisories/18939

Exploit#

No public exploit known

History#

Version 12006-02-24Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.