PT-2009-6275 · Unknown · Radio Istek Scripti

Kurdish Hackers Team · Published 2009-11-28 · Updated 2009-12-02 · CVE-2009-4096

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RADIO istek scripti version 2.5

Description The issue allows remote attackers to obtain user credentials due to insufficient access control of sensitive information stored under the web root. This can be achieved via a direct request for estafresgaftesantusyan.inc.

Recommendations For version 2.5, restrict access to sensitive information stored under the web root to prevent unauthorized access. Consider implementing proper access controls to protect user credentials. As a temporary workaround, consider restricting direct requests for estafresgaftesantusyan.inc until a more permanent solution is available.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-4096

Affected Products

Radio Istek Scripti

References · 6

• 🔥 https://exploit-db.com/exploits/10231 · Exploit
• 🔥 http://packetstormsecurity.org/0911-exploits/istek-disclose.txt · Exploit
• 🔥 http://exploit-db.com/exploits/10231 · Exploit
• http://secunia.com/advisories/37478 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4096 · Security Note
• http://osvdb.org/60516 · Note