PT-2009-3218 · Ninja Designs · Ninja Designs Mailist

Sirgod · Published 2009-02-13 · Updated 2017-09-29 · CVE-2009-0571

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ninja Designs Mailist version 3.0

Description The issue concerns insufficient access control in the admin.php file of Ninja Designs Mailist, which stores backup copies of maillist.php under the web root. This allows remote attackers to obtain sensitive information by making a direct request to the backup directory.

Recommendations For Ninja Designs Mailist version 3.0, consider restricting access to the backup directory to prevent unauthorized access to sensitive information. As a temporary workaround, restrict access to the backup copies of maillist.php until a proper fix is applied.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-0571

Affected Products

Ninja Designs Mailist

References · 3

• 🔥 https://exploit-db.com/exploits/8001 · Exploit
• http://secunia.com/advisories/33682 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0571 · Security Note