PT-2007-6799 · Bosnews · Bosnews

Published 2007-11-05 · Updated 2018-10-15 · CVE-2007-5835

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions BosNews versions 4 and 5

Description The issue allows remote attackers to cause a denial of service by overwriting files and possibly obtain administrative access due to the lack of authentication in the Install.php file. This can be exploited to replace an existing product installation or create a new admin account.

Recommendations For BosNews versions 4 and 5, consider implementing proper authentication mechanisms for the Install.php file to prevent unauthorized access and modifications. As a temporary workaround, restrict access to the Install.php file to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-5835

Affected Products

Bosnews

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-5835 · Security Note
• http://securityreason.com/securityalert/3343 · Note
• http://securityfocus.com/archive/1/482732/100/0/threaded · Note