PT-2009-3963 · Razorcms · Razorcms

Jeremi Gosney · Publicado 2009-04-28 · Atualizado 2017-08-17 · CVE-2009-1462

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions razorCMS versions prior to 0.4

Description The Security Manager in razorCMS does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.

Recommendations For versions prior to 0.4, update to version 0.4 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-1462

Produtos afetados

Razorcms

Referências · 6

• 🔥 http://marc.info/?l=full-disclosure&m=123990481506680&w=2 · Exploit
• 🔥 http://securityfocus.com/bid/34566 · Exploit
• 🔥 http://razorcms.co.uk/support/viewtopic.php?f=13&t=325 · Exploit
• 🔥 http://marc.info/?l=full-disclosure&m=123998062108561&w=2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1462 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50358 · Nota