CVE-2005-0811

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14617
http://www.kb.cert.org/vuls/id/131828Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/12843
http://secunia.com/advisories/14617
http://www.kb.cert.org/vuls/id/131828Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/12843

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-08125.0The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local CVE-2005-08135.0Buffer overflow in Initial Redirect (ir) Squid Proxy Plug-In 0.1 and 0.2 may allow attackers to cause a denial of service and execute arbitr CVE-2005-08145.0Unknown vulnerability in lshd in Lysator LSH 1.x and 2.x before 2.0.1 allows remote attackers to cause a denial of service via unknown vecto CVE-2005-08156.4Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of servi CVE-2005-08167.2Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges.CVE-2005-08175.0Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and CVE-2005-08184.3Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) email or CVE-2005-08195.0The xvesa code in Novell Netware 6.5 SP2 and SP3 allows remote attackers to redirect the xsession without authentication via a direct reques CVE-2005-08205.0Microsoft Office InfoPath 2003 SP1 includes sensitive information in the Manifest.xsf file in a custom .xsn form, which allows attackers to CVE-2005-08217.5Unknown vulnerability in Citrix MetaFrame Conferencing Manager 3.0 allows conference members to bypass organizer restrictions to control the CVE-2005-08222.1Citrix Metaframe Password Manager 2.5 and earlier stores a password in cleartext although it is obfuscated when presented to a user, which a CVE-2005-08234.6ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allow