PT-2007-7237 · Badblue · Badblue

Luigi Auriemma · Published 2007-12-15 · Updated 2018-10-15 · CVE-2007-6379

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BadBlue versions 2.72b and earlier

Description The issue allows remote attackers to obtain sensitive information via an invalid browse parameter. This is achieved by revealing the installation path in an error message.

Recommendations For BadBlue versions 2.72b and earlier, update to a version later than 2.72b to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-6379

Affected Products

Badblue

References · 10

• 🔥 https://exploit-db.com/exploits/4715 · Exploit
• 🔥 http://aluigi.altervista.org/adv/badblue-adv.txt · Exploit
• http://secunia.com/advisories/28031 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6379 · Security Note
• http://securityreason.com/securityalert/3448 · Note
• http://osvdb.org/42418 · Note
• http://vupen.com/english/advisories/2007/4160 · Note
• http://securityfocus.com/archive/1/484834/100/0/threaded · Note
• http://securityfocus.com/bid/26803 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6379 · Note