PT-2007-7237 · Badblue · Badblue

Luigi Auriemma · Publicado 2007-12-15 · Atualizado 2018-10-15 · CVE-2007-6379

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BadBlue versions 2.72b and earlier

Description The issue allows remote attackers to obtain sensitive information via an invalid browse parameter. This is achieved by revealing the installation path in an error message.

Recommendations For BadBlue versions 2.72b and earlier, update to a version later than 2.72b to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2007-6379

Produtos afetados

Badblue

Referências · 10

• 🔥 https://exploit-db.com/exploits/4715 · Exploit
• 🔥 http://aluigi.altervista.org/adv/badblue-adv.txt · Exploit
• http://securityreason.com/securityalert/3448 · Nota
• http://osvdb.org/42418 · Nota
• http://secunia.com/advisories/28031 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/4160 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6379 · Nota de Segurança
• http://securityfocus.com/archive/1/484834/100/0/threaded · Nota
• http://securityfocus.com/bid/26803 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6379 · Nota