PT-2012-5330 · Vbulletin · Vbulletin Suite+2

Published 2012-08-14 · Updated 2017-08-29 · CVE-2012-4328

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions vBulletin Suite versions 4.1.2 through 4.1.12 vBulletin Forum versions 4.1.2 through 4.1.12 vBulletin MAPI plugin version 1.4.3 for vBulletin 3.x

Description The issue concerns an unspecified vulnerability in the MAPI of vBulletin products. The impact and attack vectors of this issue are not specified.

Recommendations For vBulletin Suite versions 4.1.2 through 4.1.12, update to a version outside of this range to resolve the issue. For vBulletin Forum versions 4.1.2 through 4.1.12, update to a version outside of this range to resolve the issue. For vBulletin MAPI plugin version 1.4.3 for vBulletin 3.x, consider disabling the MAPI plugin until a patch or updated version is available.

Fix

Related Identifiers

CVE-2012-4328

Affected Products

Vbulletin Forum

Vbulletin Mapi Plugin

Vbulletin Suite

References · 9

• https://vbulletin.com/forum/showthread.php/400165-vBulletin-Security-Patch-for-vBulletin-4-1-12-for-Suite-amp-Forum-04-23-2012 · Vendor Advisory
• https://vbulletin.com/forum/showthread.php/400164-vBulletin-Security-Patch-for-vBulletin-4-1-2-4-1-11-for-Suite-amp-Forum-04-23-2012 · Vendor Advisory
• http://secunia.com/advisories/48917 · Vendor Advisory
• https://vbulletin.com/forum/showthread.php/400162-vBulletin-3-x-MAPI-Plugin-1-4-3-released-with-security-patch-04-23-2012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-4328 · Security Note
• http://securityfocus.com/bid/53226 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75160 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4328 · Note
• http://osvdb.org/81474 · Note