PT-2009-5598 · Php+2 · Php Rss Builder+5

Takayoshi Isayama · Publicado 2009-09-22 · Atualizado 2009-09-24 · CVE-2009-3284

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpspot PHP BBS versions prior to 20090914 PHP Image Capture BBS versions prior to 20090914 PHP & CSS BBS versions prior to 20090914 PHP BBS CE versions prior to 20090914 PHP RSS Builder versions prior to 20090914 webshot versions prior to 20090914

Description A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors.

Recommendations For phpspot PHP BBS versions prior to 20090914, update to a version released after 20090914. For PHP Image Capture BBS versions prior to 20090914, update to a version released after 20090914. For PHP & CSS BBS versions prior to 20090914, update to a version released after 20090914. For PHP BBS CE versions prior to 20090914, update to a version released after 20090914. For PHP RSS Builder versions prior to 20090914, update to a version released after 20090914. For webshot versions prior to 20090914, update to a version released after 20090914.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-3284

Produtos afetados

Php & Css Bbs

Php Bbs Ce

Php Image Capture Bbs

Php Rss Builder

Phpspot Php Bbs

Webshot

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-3284 · Nota de Segurança
• http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000064.html · Nota
• http://phpspot.net/php/pg2009%94N9%8C%8E%20PHP%83X%83N%83%8A%83v%83g%82%CC%90%C6%8E%E3%90%AB.html · Nota
• http://secunia.com/advisories/36783 · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN65914253/index.html · Nota