CVE-2005-2259

Published: Jul 13, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping Mall Software, (2) Domain Name Auction Software, (3) Standard Classified Ads Software, and (4) MakeBid Reverse Auction allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.

Affected (7)

Products: Usanet Creations: Domain Name Auction, Makebid Auction Deluxe, Makebid Auction Standard, Makebid Reverse Auction, Standard Classified Ads, Usanet Shopping Mall

Usanet Creations

6 products

Domain Name Auction

Makebid Auction Deluxe

Makebid Auction Standard

Makebid Reverse Auction

Standard Classified Ads

Usanet Shopping Mall

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Usanet Creations Domain Name Auction	All versions
Usanet Creations Makebid Auction Deluxe	All versions
Usanet Creations Makebid Auction Deluxe	Version 3.30
Usanet Creations Makebid Auction Standard	All versions
Usanet Creations Makebid Reverse Auction	All versions
Usanet Creations Standard Classified Ads	All versions
Usanet Creations Usanet Shopping Mall	All versions

References (6)

http://secunia.com/advisories/15985

Source: cve@mitre.org

http://securitytracker.com/id?1014411

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/14179

Source: cve@mitre.org

http://secunia.com/advisories/15985

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1014411

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/14179

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.