PT-2008-5406 · Open Source Matters · Joomla!

Emanuele Gentili · Publicado 2008-09-18 · Atualizado 2017-08-08 · CVE-2008-4103

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.5.7

Description The issue concerns the mailto component, which fails to validate URLs before sending email messages. This allows remote attackers to transmit spam.

Recommendations For versions prior to 1.5.7, update to version 1.5.7 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-4103

Produtos afetados

Joomla!

Referências · 9

• http://secunia.com/advisories/31789 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4103 · Nota
• http://developer.joomla.org/security/news/273-20080903-core-commailto-spam.html · Nota
• http://marc.info/?l=oss-security&m=122118210029084&w=2 · Nota
• http://securityreason.com/securityalert/4275 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45070 · Nota
• http://marc.info/?l=oss-security&m=122115344915232&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4103 · Nota de Segurança
• http://marc.info/?l=oss-security&m=122152798516853&w=2 · Nota