PT-2006-1634 · Phpstatus · Phpstatus

Aliaksandr Hartsuyeu · Publicado 2006-02-07 · Atualizado 2018-10-19 · CVE-2006-0572

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpstatus version 1.0

Description The issue allows remote attackers to bypass authentication due to the lack of password requirement when using cookies to identify a user.

Recommendations For phpstatus version 1.0, consider implementing password requirements for cookie-based user identification as a mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2006-0572

Produtos afetados

Phpstatus

Referências · 6

• http://securityreason.com/securityalert/427 · Nota
• http://securityfocus.com/archive/1/424842/100/0/threaded · Nota
• http://secunia.com/advisories/18791 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0572 · Nota de Segurança
• http://securityfocus.com/bid/16587 · Nota
• http://evuln.com/vulns/61/summary.html · Aviso do Fabricante