PT-2007-2783 · Dynaliens · Dynaliens

Published 2007-03-10 · Updated 2018-10-16 · CVE-2007-1389

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions dynaliens versions 2.0 through 2.1

Description The issue allows remote attackers to bypass authentication and perform certain privileged actions. This can be achieved by making a direct request for specific files in the admin/ directory, including validlien.php3, supprlien.php3, supprub.php3, confsuppr.php3, modiflien.php3, or confmodif.php3.

Recommendations For dynaliens versions 2.0 through 2.1, as a temporary workaround, consider restricting access to the admin/ directory to minimize the risk of exploitation. Avoid using direct requests for the mentioned files until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-1389

Affected Products

Dynaliens

References · 5

• 🔥 http://forums.avenir-geopolitique.net/viewtopic.php?t=2722 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1389 · Security Note
• http://securityfocus.com/archive/1/462221/100/0/threaded · Note
• http://securityreason.com/securityalert/2403 · Note
• http://securityfocus.com/bid/22873 · Note