PT-2007-6799 · Bosnews · Bosnews

Publicado 2007-11-05 · Atualizado 2018-10-15 · CVE-2007-5835

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BosNews versions 4 and 5

Description The issue allows remote attackers to cause a denial of service by overwriting files and possibly obtain administrative access due to the lack of authentication in the Install.php file. This can be exploited to replace an existing product installation or create a new admin account.

Recommendations For BosNews versions 4 and 5, consider implementing proper authentication mechanisms for the Install.php file to prevent unauthorized access and modifications. As a temporary workaround, restrict access to the Install.php file to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-5835

Produtos afetados

Bosnews

Referências · 3

• http://securityreason.com/securityalert/3343 · Nota
• http://securityfocus.com/archive/1/482732/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5835 · Nota de Segurança