CVE-2005-2956

Published: Sep 16, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

ATutor 1.5.1, and possibly earlier versions, stores temporary chat logs under the web document root with insufficient access control and predictable filenames, which allows remote attackers to obtain user chat conversations via direct requests to those files.

Affected (1)

Products: Adaptive Technology Resource Centre: Atutor

Adaptive Technology Resource Centre

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adaptive Technology Resource Centre Atutor	Version 1.5.1

References (8)

http://marc.info/?l=bugtraq&m=112671176100432&w=2

Source: cve@mitre.org

http://rgod.altervista.org/atutor151.html

Source: cve@mitre.org

ExploitVendor Advisory

http://securityreason.com/securityalert/9

Source: cve@mitre.org

http://www.securityfocus.com/bid/14832

Source: cve@mitre.org

Exploit

http://marc.info/?l=bugtraq&m=112671176100432&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://rgod.altervista.org/atutor151.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://securityreason.com/securityalert/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14832

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.