CVE

Id
35046  
CVE No.
CVE-2008-4929  
Status
Candidate  
Description
MyBB (aka MyBulletinBoard) 1.4.2 uses insufficient randomness to compose filenames of uploaded files used as attachments, which makes it easier for remote attackers to read these files by guessing filenames.  
Phase
Assigned (20081104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
383496 35046 CVE-2008-4929 BUGTRAQ:20081027 MyBB 1.4.2: Multiple Vulnerabilties  View
383497 35046 CVE-2008-4929 URL:http://archives.neohapsis.com/archives/bugtraq/2008-10/0203.html  View
383498 35046 CVE-2008-4929 FULLDISC:20081027 MyBB 1.4.2: Multiple Vulnerabilties  View
383499 35046 CVE-2008-4929 URL:http://archives.neohapsis.com/archives/fulldisclosure/2008-10/0472.html  View
383500 35046 CVE-2008-4929 MLIST:[oss-security] 20081101 CVE request (Fwd: MyBB 1.4.2: Multiple Vulnerabilties)  View
383501 35046 CVE-2008-4929 URL:http://www.openwall.com/lists/oss-security/2008/11/01/2  View
383502 35046 CVE-2008-4929 BID:31936  View
383503 35046 CVE-2008-4929 URL:http://www.securityfocus.com/bid/31936  View
383504 35046 CVE-2008-4929 VUPEN:ADV-2008-2967  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
46962 JVNDB-2008-002272 Linux Kernel の hfsplus_find_cat 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/hfsplus/catalog.c における hfsplus_find_cat 関数には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-4933 35046 7.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002272.html  View