PT-2007-5670 · Ez Systems · Ez Publish

Publicado 2007-08-23 · Atualizado 2015-07-27 · CVE-2007-4494

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions eZ publish versions prior to 3.8.9 eZ publish versions 3.9 prior to 3.9.3

Description The issue allows remote attackers to conduct spam attacks due to the lack of access limitation for anonymous users in the tipafriend function.

Recommendations For versions prior to 3.8.9, update to version 3.8.9 or later. For versions 3.9 prior to 3.9.3, update to version 3.9.3 or later.

Correção

Identificadores relacionados

CVE-2007-4494

Produtos afetados

Ez Publish

Referências · 8

• http://securityfocus.com/bid/25538 · Nota
• http://osvdb.org/40325 · Nota
• http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4494 · Nota
• http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-4494 · Nota de Segurança
• http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9 · Nota
• http://secunia.com/advisories/26686 · Nota