CVE-2005-0112

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the (1) config.bin (2) profile.wlp?PN=ggg or (3) event.logs URLs.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Apr 14, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-01137.2inpview in SGI IRIX allows local users to execute arbitrary commands via the SUN_TTSESSION_CMD environment variable, which is executed by in CVE-2005-01142.1vsdatant.sys in Zone Lab ZoneAlarm before 5.5.062.011, ZoneAlarm Wireless before 5.5.080.000, Check Point Integrity Client 4.x before 4.5.12 CVE-2005-01157.5Stack-based buffer overflow in DataRescue Interactive Disassembler (IDA) Pro 4.7 allows attackers to execute arbitrary code via a PE file wi CVE-2005-01167.5AWStats 6.1, and other versions before 6.3, allows remote attackers to execute arbitrary commands via shell metacharacters in the configdir CVE-2005-01174.6Buffer overflow in XShisen before 1.36 allows local users to execute arbitrary code via a long GECOS field.CVE-2005-01182.1helvis 1.8h2_1 and earlier stores recovery files in world readable directories with world readable permissions, which allows local users to CVE-2005-01192.1helvis 1.8h2_1 and earlier allows local users to recover and read the files of other users via the elvrec setuid program.CVE-2005-01202.1helvis 1.8h2_1 and earlier allows local users to delete arbitrary files via the elvprsv setuid program.CVE-2005-01214.6Multiple buffer overflows in golddig 2.0 and earlier allow local users to execute arbitrary code via (1) a long map name command line argume CVE-2005-01242.1The coda_pioctl function in the coda functionality (pioctl.c) for Linux kernel 2.6.9 and 2.4.x before 2.4.29 may allow local users to cause CVE-2005-01257.2The "at" commands on Mac OS X 10.3.7 and earlier do not properly drop privileges, which allows local users to (1) delete arbitrary files via CVE-2005-01267.5ColorSync on Mac OS X 10.3.7 and 10.3.8 allows attackers to execute arbitrary code via malformed ICC color profiles that modify the heap.