PT-2007-5769 · Eyeos · Eyeos

Andrej Komarov · Publicado 2007-08-31 · Atualizado 2018-10-15 · CVE-2007-4609

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions eyeOS (affected versions not specified)

Description The issue concerns the use of predictable checksum values in the checknum parameter for access control. This allows remote attackers to register multiple accounts via doCreateUser actions, add multiple eyeBoard messages via addMsg actions, and potentially cause a denial of service or conduct unauthorized activities by guessing valid parameter values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-4609

Produtos afetados

Eyeos

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-4609 · Nota de Segurança
• http://osvdb.org/45836 · Nota
• http://securityreason.com/securityalert/3081 · Nota
• http://securityfocus.com/archive/1/477866/100/0/threaded · Nota