CVE-2005-0269

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Weaknesses

CWE-178

Affected products

• Gnuboard (Sir)

References

• http://marc.info/?l=bugtraq&m=110477648219738&w=2
• http://secunia.com/advisories/13711
• http://www.securityfocus.com/bid/12149
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18729