CVE

Id
28935  
CVE No.
CVE-2007-5578  
Status
Candidate  
Description
Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers to bypass authentication via (1) base_main.php, (2) base_qry_alert.php, and possibly other vectors.  
Phase
Assigned (20071018)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
303146 28935 CVE-2007-5578 FULLDISC:20070604 Kevin Johnson BASE <= 1.3.6 authentication bypass  View
303147 28935 CVE-2007-5578 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0031.html  View
303148 28935 CVE-2007-5578 FULLDISC:20070606 Kevin Johnson BASE <= 1.3.6 authentication bypass  View
303149 28935 CVE-2007-5578 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-June/063767.html  View
303150 28935 CVE-2007-5578 CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=103348&release_id=521723  View
303151 28935 CVE-2007-5578 BID:24315  View
303152 28935 CVE-2007-5578 URL:http://www.securityfocus.com/bid/24315  View
303153 28935 CVE-2007-5578 OSVDB:35243  View
303154 28935 CVE-2007-5578 URL:http://www.osvdb.org/35243  View
303155 28935 CVE-2007-5578 SECUNIA:25518  View
303156 28935 CVE-2007-5578 URL:http://secunia.com/advisories/25518  View
303157 28935 CVE-2007-5578 XF:base-basemain-security-bypass(34724)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
54115 JVNDB-2007-002807 Windows 上の Cisco Security Agent の特定のドライバにおける任意のコードを実行される脆弱性 Windows 上の Cisco Security Agent の特定のドライバには、任意のコードを実行される脆弱性が存在します。 CVE-2007-5580 28935 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002807.html  View