CVE-2003-0599 (GCVE-0-2003-0599)
Vulnerability from cvelistv5 – Published: 2003-07-25 04:00 – Updated: 2024-08-08 01:58
VLAI?
Summary
Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T01:58:10.937Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.phpgroupware.org"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html"
},
{
"name": "DSA-365",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "http://www.debian.org/security/2003/dsa-365"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2003-07-03T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2003-08-14T09:00:00",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.phpgroupware.org"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html"
},
{
"name": "DSA-365",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "http://www.debian.org/security/2003/dsa-365"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2003-0599",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.phpgroupware.org",
"refsource": "CONFIRM",
"url": "http://www.phpgroupware.org"
},
{
"name": "http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html",
"refsource": "CONFIRM",
"url": "http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html"
},
{
"name": "DSA-365",
"refsource": "DEBIAN",
"url": "http://www.debian.org/security/2003/dsa-365"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2003-0599",
"datePublished": "2003-07-25T04:00:00",
"dateReserved": "2003-07-21T00:00:00",
"dateUpdated": "2024-08-08T01:58:10.937Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"0.9.14.004\", \"matchCriteriaId\": \"A0B79024-B9B4-4FE1-A734-4729D26DB5CD\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16prerc:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6D8DDA15-ED21-498E-94BB-2998968139D7\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad desconocida en la capacidad de Sistema de Ficheros Virtual (VFS) de phpGroupWare 0.9.16preRC, y versiones anteriores a 0.9.14.004 con implicaciones desconocidas, relacionadas con que la ruta VFS est\\u00e9 bajo la ra\\u00edz de documentos web.\"}]",
"id": "CVE-2003-0599",
"lastModified": "2024-11-20T23:45:06.750",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 10.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2003-08-27T04:00:00.000",
"references": "[{\"url\": \"http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.debian.org/security/2003/dsa-365\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.phpgroupware.org\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.debian.org/security/2003/dsa-365\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.phpgroupware.org\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"NVD-CWE-Other\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2003-0599\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2003-08-27T04:00:00.000\",\"lastModified\":\"2025-04-03T01:03:51.193\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad desconocida en la capacidad de Sistema de Ficheros Virtual (VFS) de phpGroupWare 0.9.16preRC, y versiones anteriores a 0.9.14.004 con implicaciones desconocidas, relacionadas con que la ruta VFS est\u00e9 bajo la ra\u00edz de documentos web.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-Other\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"0.9.14.004\",\"matchCriteriaId\":\"A0B79024-B9B4-4FE1-A734-4729D26DB5CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:phpgroupware:phpgroupware:0.9.16prerc:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D8DDA15-ED21-498E-94BB-2998968139D7\"}]}]}],\"references\":[{\"url\":\"http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.debian.org/security/2003/dsa-365\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.phpgroupware.org\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://mail.gnu.org/archive/html/phpgroupware-users/2003-07/msg00035.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.debian.org/security/2003/dsa-365\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.phpgroupware.org\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…