CVE

Id
42241  
CVE No.
CVE-2009-4806  
Status
Candidate  
Description
admin/save_user.asp in Digital Interchange Document Library 1.0.1 does not require administrative authentication, which allows remote attackers to read or modify the administrator"s credentials via unspecified vectors. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20100423)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
461768 42241 CVE-2009-4806 MILW0RM:8130  View
461769 42241 CVE-2009-4806 URL:http://www.milw0rm.com/exploits/8130  View
461770 42241 CVE-2009-4806 BID:33983  View
461771 42241 CVE-2009-4806 URL:http://www.securityfocus.com/bid/33983  View
461772 42241 CVE-2009-4806 SECUNIA:34129  View
461773 42241 CVE-2009-4806 URL:http://secunia.com/advisories/34129  View
461774 42241 CVE-2009-4806 XF:documentlibrary-saveuser-security-bypass(49018)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39342 JVNDB-2010-005127 Samhain の SRP 実装における認証を回避される脆弱性 Samhain の Secure Remote Password (SRP) 実装は、プロトコルによって必要とされる特定のゼロ値に対するチェックをしないため、認証を回避される脆弱性が存在します。 CVE-2009-4810 42241 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005127.html  View