PT-2008-1788 · Snitz · Snitz Forums 2000

Publicado 2008-01-08 · Atualizado 2018-10-15 · CVE-2008-0135

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Snitz Forums 2000 versions 3.4.06 and earlier

Description The issue allows remote attackers to download a database due to insufficient access control of sensitive information stored under the web root. This can be achieved via a direct request for the database file.

Recommendations For Snitz Forums 2000 versions 3.4.06 and earlier, restrict access to the forum/snitz forums 2000.mdb file to prevent unauthorized downloads. Consider moving sensitive files outside of the web root or implementing proper access controls to mitigate the risk.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-0135

Produtos afetados

Snitz Forums 2000

Referências · 6

• 🔥 https://exploit-db.com/exploits/10639 · Exploit
• http://hackerscenter.com/archive/view.asp?id=28145 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0135 · Nota de Segurança
• http://packetstormsecurity.org/0801-exploits/snitz-multi.txt · Nota
• http://securityfocus.com/archive/1/485894/100/200/threaded · Nota
• http://securityfocus.com/archive/1/485836/100/200/threaded · Nota