CVE-2011-0435

Publication date 7 March 2011

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Description

Domain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin/bw_per_month.php and (2) client/bw_per_month.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request.

Status

Package Ubuntu Release Status
dtc 10.10 maverick
Fixed 0.30.18-1ubuntu1
10.04 LTS lucid
Fixed 0.30.10-1ubuntu1
9.10 karmic
Fixed 0.29.17-1+lenny1build0.9.10.1
8.04 LTS hardy
Fixed 0.25.3-2ubuntu1.1
6.06 LTS dapper Not in release

References

Other references

Access our resources on patching vulnerabilities