PT-2007-6074 · Linden · Second Life

Publicado 2007-09-18 · Atualizado 2018-10-15 · CVE-2007-4960

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linden Lab Second Life (affected versions not specified)

Description The issue allows remote attackers to obtain sensitive information by exploiting an argument injection vulnerability in the secondlife:// protocol handler. This is achieved by using a " " (double-quote space) sequence followed by the -autologin and -loginuri arguments, causing the handler to post login credentials and software installation details to an arbitrary URL, such as "/api/v1/login" or "/users/{id}". The username and password variables are vulnerable to injection. The checkPassword() function may be involved in the exploitation process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-255

CWE-310

Identificadores relacionados

CVE-2007-4960

Produtos afetados

Second Life

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-4960 · Nota de Segurança
• http://gnucitizen.org/blog/ie-pwns-secondlife · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36651 · Nota
• http://securityfocus.com/archive/1/479698/100/0/threaded · Nota
• http://vupen.com/english/advisories/2007/3188 · Nota
• http://secunia.com/advisories/26845 · Aviso do Fabricante