PT-2009-6335 · Typo3 · Typo3+1

Georg Ringer · Published 2009-12-02 · Updated 2009-12-07 · CVE-2009-4167

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Automatic Base Tags for RealUrl (lt basetag) extension version 1.0.0 for TYPO3

Description The issue allows remote attackers to conduct cache spoofing attacks. The exact vectors used for the attack are not specified.

Recommendations For version 1.0.0 of the Automatic Base Tags for RealUrl (lt basetag) extension, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2009-4167

Affected Products

Automatic Base Tags For Realurl

Typo3

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2009-4167 · Security Note
• http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-017 · Vendor Advisory
• http://securityfocus.com/bid/37169 · Note