NVD

Id
3256  
Name
CVE-2008-3375  
Description
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-30  
Modified Date
2009-08-19  
Seq
2008-3375  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
20603 3256 CVE-2008-3375 4069  View
20604 3256 CVE-2008-3375 http://www.gulftech.org/?node=research&article_id=00117-07282008  View
20605 3256 CVE-2008-3375 http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1178  View
20606 3256 CVE-2008-3375 http://www.jamroom.net/phpBB2/viewtopic.php?t=24454  View
20607 3256 CVE-2008-3375 20080728 JamRoom <= 3.3.8 Authentication Bypass  View
20608 3256 CVE-2008-3375 30406  View
20609 3256 CVE-2008-3375 jamroom-jamroommiscinc-auth-bypass(44048)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49376 JVNDB-2008-004686 JamRoom の includes/jamroom-misc.inc.php における管理アクセス権を取得される脆弱性 JamRoom の includes/jamroom-misc.inc.php の jrCookie 関数には、認証を回避される、および管理アクセス権を取得される脆弱性が存在します。 CVE-2008-3375 33488 CVE-2008-3375 3256 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004686.html 2008-07-28 2012-09-25 View