CVE-2011-0435

CVSS V2 Medium 5 CVSS V3 None
Description
Domain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin/bw_per_month.php and (2) client/bw_per_month.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request.
Overview
  • CVE ID
  • CVE-2011-0435
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2011-03-07T21:00:01
  • Last Modified Date
  • 2017-08-17T01:33:30
Weakness Enumerations
CWE URL
CWE-287 http://cwe.mitre.org/data/definitions/287.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:gplhost:domain_technologie_control:*:*:*:*:*:*:*:* 1 OR 0.32.8
cpe:2.3:a:gplhost:domain_technologie_control:0.24.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.25.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.25.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.25.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.26.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.26.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.26.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.27.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.28.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.28.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.28.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.28.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.28.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.28.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.29.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.29.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.29.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.29.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.29.14:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.29.15:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.29.16:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.29.17:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.30.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.30.8:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.30.10:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.30.18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.30.20:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.32.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.32.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.32.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.32.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.32.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.32.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:gplhost:domain_technologie_control:0.32.7:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:P/I:N/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • NONE
  • Availability Impact
  • NONE
  • Base Score
  • 5
  • Severity
  • MEDIUM
  • Exploitability Score
  • 10
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://git.gplhost.com/gitweb/?p=dtc.git;a=commit;h=e94e8b9cc354bfcaeb284d5331b815256bb46162 Patch
http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.29.17-1+lenny1/changelog
http://packages.debian.org/changelogs/pool/main/d/dtc/dtc_0.32.10-1/changelog
http://secunia.com/advisories/43523 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0556 Vendor Advisory
http://www.gplhost.sg/lists/dtcannounce/msg00025.html Patch
http://git.gplhost.com/gitweb/?p=dtc.git;a=commit;h=89da9c519b04cda1b23e6290d2b0a6cea1bae31e Patch
http://www.debian.org/security/2011/dsa-2179
https://exchange.xforce.ibmcloud.com/vulnerabilities/65896
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2011-0435
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0435
History
Created Old Value New Value Data Type Notes
2022-05-10 08:55:28 Added to TrackCVE