CVE

Id
34041  
CVE No.
CVE-2008-3924  
Status
Candidate  
Description
The "Make a backup" functionality in Content Management Made Easy (CMME) 1.12 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover (1) account names and (2) password hashes via a direct request for (a) backup/cmme_data.zip or (b) backup/cmme_cmme.zip. NOTE: it was later reported that vector a also affects CMME 1.19.  
Phase
Assigned (20080904)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
371909 34041 CVE-2008-3924 MILW0RM:6313  View
371910 34041 CVE-2008-3924 URL:http://www.milw0rm.com/exploits/6313  View
371911 34041 CVE-2008-3924 BID:30854  View
371912 34041 CVE-2008-3924 URL:http://www.securityfocus.com/bid/30854  View
371913 34041 CVE-2008-3924 SECUNIA:31599  View
371914 34041 CVE-2008-3924 URL:http://secunia.com/advisories/31599  View
371915 34041 CVE-2008-3924 SREASON:4220  View
371916 34041 CVE-2008-3924 URL:http://securityreason.com/securityalert/4220  View
371917 34041 CVE-2008-3924 XF:cmme-backup-info-disclosure(44684)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48095 JVNDB-2008-003405 Honeyd の test.sh における任意のファイルを上書きされる脆弱性 Honeyd の test.sh には、任意のファイルを上書きされる脆弱性が存在します。 CVE-2008-3928 34041 6.9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003405.html  View