CVE-2008-4929

Опубликовано: 04 нояб. 2008

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html
Broken Link
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html
Broken Link
Exploit
http://www.openwall.com/lists/oss-security/2008/11/01/2
Exploit
Mailing List
http://www.securityfocus.com/bid/31936
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/2967
Broken Link
http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html
Broken Link
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html
Broken Link
Exploit
http://www.openwall.com/lists/oss-security/2008/11/01/2
Exploit
Mailing List
http://www.securityfocus.com/bid/31936
Broken Link
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2008/2967
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mybb:mybb:1.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00725

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-330

Связанные уязвимости

GHSA-fhx3-h3g7-jmvr