CVE-2005-4458

Published: Dec 21, 2005Modified: Apr 16, 2026

9.0

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 8.0 / Impact: 10.0

Source: NVD

Description

Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITE_MGR group.

Affected (17)

Products: Metadot: Metadot Portal Server

Metadot

1 product

Metadot Portal Server

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Metadot Metadot Portal Server	Version 5.5.2.1
Metadot Metadot Portal Server	Version 5.6.4.1
Metadot Metadot Portal Server	Version 5.6.4.2
Metadot Metadot Portal Server	Version 5.6.4.3
Metadot Metadot Portal Server	Version 5.6.4
Metadot Metadot Portal Server	Version 5.6.5.1
Metadot Metadot Portal Server	Version 5.6.5.2
Metadot Metadot Portal Server	Version 5.6.5.3.1
Metadot Metadot Portal Server	Version 5.6.5.3
Metadot Metadot Portal Server	Version 5.6.5.4b5
Metadot Metadot Portal Server	Version 5.6.5
Metadot Metadot Portal Server	Version 5.6.6
Metadot Metadot Portal Server	Version 6.4.1
Metadot Metadot Portal Server	Version 6.4.2
Metadot Metadot Portal Server	Version 6.4.3
Metadot Metadot Portal Server	Version 6.4.4
Metadot Metadot Portal Server	Version 6.4