PT-2006-4690 · Kailash Nadh · Boastmachine

Darkfig · Published 2006-07-25 · Updated 2018-10-17 · CVE-2006-3831

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kailash Nadh boastMachine (formerly bMachine) versions 3.1 and earlier

Description The issue in Kailash Nadh boastMachine allows remote attackers to obtain sensitive information by downloading a backup file due to the use of predicable filenames for database backups and insufficient access control. The backup files are stored under the web root.

Recommendations For versions 3.1 and earlier, consider restricting access to the backup files stored under the web root until a fix is available. As a temporary workaround, moving the backup files to a location outside of the web root or implementing stricter access controls can help minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-3831

Affected Products

Boastmachine

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-3831 · Security Note
• http://secunia.com/advisories/21066 · Vendor Advisory
• http://acid-root.new.fr/advisories/boastmachine.txt · Note
• http://securityreason.com/securityalert/1271 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3831 · Note
• http://securitytracker.com/id?1016515 · Note
• http://securityfocus.com/archive/1/440306/100/0/threaded · Note