CVE-2005-3434

Published: Nov 2, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Archilles Newsworld before 1.5.0-rc1 stores (1) account.nwd and (2) session.nwd under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames, hashed passwords, and session IDs, and gain privileges.

Affected (3)

Products: Archilles: Newsworld

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Archilles Newsworld	Up to 1.5.0_rc1
Archilles Newsworld	Version 1.3.1
Archilles Newsworld	Version 1.3.2

References (8)

http://marc.info/?l=bugtraq&m=113018731120709&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17310/

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/22859

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22860

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=113018731120709&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17310/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/22859

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/22860

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.