PT-2009-6335 · Typo3 · Typo3+1

Georg Ringer · Publicado 2009-12-02 · Atualizado 2009-12-07 · CVE-2009-4167

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Automatic Base Tags for RealUrl (lt basetag) extension version 1.0.0 for TYPO3

Description The issue allows remote attackers to conduct cache spoofing attacks. The exact vectors used for the attack are not specified.

Recommendations For version 1.0.0 of the Automatic Base Tags for RealUrl (lt basetag) extension, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2009-4167

Produtos afetados

Automatic Base Tags For Realurl

Typo3

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2009-4167 · Nota de Segurança
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017 · Aviso do Fabricante
• http://securityfocus.com/bid/37169 · Nota