PT-2006-4690 · Kailash Nadh · Boastmachine

Darkfig · Publicado 2006-07-25 · Atualizado 2018-10-17 · CVE-2006-3831

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kailash Nadh boastMachine (formerly bMachine) versions 3.1 and earlier

Description The issue in Kailash Nadh boastMachine allows remote attackers to obtain sensitive information by downloading a backup file due to the use of predicable filenames for database backups and insufficient access control. The backup files are stored under the web root.

Recommendations For versions 3.1 and earlier, consider restricting access to the backup files stored under the web root until a fix is available. As a temporary workaround, moving the backup files to a location outside of the web root or implementing stricter access controls can help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-3831

Produtos afetados

Boastmachine

Referências · 7

• http://acid-root.new.fr/advisories/boastmachine.txt · Nota
• http://securityreason.com/securityalert/1271 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3831 · Nota
• http://securitytracker.com/id?1016515 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3831 · Nota de Segurança
• http://securityfocus.com/archive/1/440306/100/0/threaded · Nota
• http://secunia.com/advisories/21066 · Aviso do Fabricante