PT-2002-1273 · Paintbbs · Paintbbs

Published 2002-05-03 · Updated 2008-09-11 · CVE-2002-0202

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions PaintBBS version 1.2

Description The issue allows local users to obtain the encrypted server password via the world-readable oekakibbs.conf file or modify the server configuration via the world-writeable /oekaki/ folder due to insecure permissions of certain files and directories installed by PaintBBS.

Recommendations For PaintBBS version 1.2, consider changing the permissions of the oekakibbs.conf file to restrict read access and modify the permissions of the /oekaki/ folder to prevent write access by unauthorized users.

Fix

Related Identifiers

CVE-2002-0202

Affected Products

Paintbbs

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-0202 · Security Note
• http://online.securityfocus.com/archive/1/251985 · Vendor Advisory
• http://iss.net/security_center/static/7982.php · Vendor Advisory
• http://securityfocus.com/bid/3948 · Note