CVE:CVE-2005-3339
CNNVD:CNNVD-200510-253
Mantis是用PHP脚本语言编写的基于web的漏洞跟踪系统。
Mantis 0.19.3以前版本缓存了长度超过正常的User ID ，该操作引发了未知影响和攻击向量
solution:Upgrade mantis mantis to a higher version than 0.19.0,0.19.0_rc1,0.19.0a1,0.19.0a2,0.19.1,0.19.2,0.19.3,and avoid the version 0.19.0,0.19.0_rc1,0.19.0a1,0.19.0a2,0.19.1,0.19.2,0.19.3