Vulnerabilities > CVE-2005-0269 - Improper Handling of Case Sensitivity vulnerability in SIR Gnuboard 3.40

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
sir
CWE-178
critical
NVD
Published: 2005-05-02
Updated: 2024-11-20

Summary

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.

Vulnerable Configurations

Part Description Count
Application
Sir
2

Common Weakness Enumeration (CWE)

References