CVE

Id
38897  
CVE No.
CVE-2009-1462  
Status
Candidate  
Description
The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.  
Phase
Assigned (20090428)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
427172 38897 CVE-2009-1462 FULLDISC:20090416 [follow-up] razorCMS - Multiple Vulnerabilities  View
427173 38897 CVE-2009-1462 URL:http://marc.info/?l=full-disclosure&m=123998062108561&w=2  View
427174 38897 CVE-2009-1462 FULLDISC:20090416 razorCMS - Multiple Vulnerabilities  View
427175 38897 CVE-2009-1462 URL:http://marc.info/?l=full-disclosure&m=123990481506680&w=2  View
427176 38897 CVE-2009-1462 CONFIRM:http://razorcms.co.uk/support/viewtopic.php?f=13&t=325  View
427177 38897 CVE-2009-1462 BID:34566  View
427178 38897 CVE-2009-1462 URL:http://www.securityfocus.com/bid/34566  View
427179 38897 CVE-2009-1462 XF:razorcms-security-manager-unspecified(50358)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43606 JVNDB-2009-004613 A-A-S における重要な情報を取得される脆弱性 Application Access Server (A-A-S) は、aas.ini に平文で (1) パスワードおよび (2) ポートキーワードを格納するため、重要な情報を取得される脆弱性が存在します。 CVE-2009-1466 38897 2.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004613.html  View