CVE-2011-0435

Domain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin...

5.0 MediumFix available

Domain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin/bw_per_month.php and (2) client/bw_per_month.php, which allows remote attackers to obtain potentially sensitive bandwidth information via a direct request.

Exploit likelihood

1.97%Unchanged since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2011-0435
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-287
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-0435
Updated: 2026-11-02

EUVDEUVD-2011-0460 No score

Record: EUVD-2011-0460
Updated: 2026-11-03

GitHub AdvisoriesGHSA-q9h6-jm9r-6x4w No score

Domain Technologie Control (DTC) before 0.32.9 does not require authentication for (1) admin...

Record: GHSA-q9h6-jm9r-6x4w
Weakness: CWE-287
Updated: 2026-11-02

Affected products

gplhost domain technologie control

Affected packages

Affected packages
Package	Affected	Fixed
`dtc` Debian:5.0	before 0.29.17-1+lenny1, plus listed versions 0.29.17-1	0.29.17-1+lenny1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0435 is a medium vulnerability (CVSS 5.0) in Gplhost Domain Technologie Control, published March 2, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in dtc 0.29.17-1+lenny1.

References

Show 7 moreShow less