PT-2007-6074 · Linden · Second Life

Published 2007-09-18 · Updated 2018-10-15 · CVE-2007-4960

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linden Lab Second Life (affected versions not specified)

Description The issue allows remote attackers to obtain sensitive information by exploiting an argument injection vulnerability in the secondlife:// protocol handler. This is achieved by using a " " (double-quote space) sequence followed by the -autologin and -loginuri arguments, causing the handler to post login credentials and software installation details to an arbitrary URL, such as "/api/v1/login" or "/users/{id}". The username and password variables are vulnerable to injection. The checkPassword() function may be involved in the exploitation process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-255

CWE-310

Related Identifiers

CVE-2007-4960

Affected Products

Second Life

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-4960 · Security Note
• http://secunia.com/advisories/26845 · Vendor Advisory
• http://gnucitizen.org/blog/ie-pwns-secondlife · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36651 · Note
• http://securityfocus.com/archive/1/479698/100/0/threaded · Note
• http://vupen.com/english/advisories/2007/3188 · Note