CVEvulnerability

CVE-2005-0269

9.8 CRITICAL Published 2005-05-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-05-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-178

Description

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.

Affected configurations

• sir gnuboard (<= 3.40)

Related

Weakness · CWE (1)

  • CWE-178 Improper Handling of Case Sensitivity weakness

Referenced by CWE · observed example (2)

  • CWE-1289 Improper Validation of Unsafe Equivalence in Input weakness
  • CWE-178 Improper Handling of Case Sensitivity weakness

References