NVD

Id
48000  
Name
CVE-2009-0674  
Description
images/captcha.php in Raven Web Services RavenNuke 2.30, when register_globals and display_errors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ between existing and nonexistent pathnames.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-02-22  
Modified Date
2016-11-18  
Seq
2009-0674  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
240667 48000 CVE-2009-0674 http://ravenphpscripts.com/postt17156.html  View
240668 48000 CVE-2009-0674 8068  View
240669 48000 CVE-2009-0674 20090216 [waraxe-2009-SA#072] - Multiple Vulnerabilities in RavenNuke 2.3.0  View
240670 48000 CVE-2009-0674 33787  View
240671 48000 CVE-2009-0674 http://www.waraxe.us/advisory-72.html  View
240672 48000 CVE-2009-0674 ravennuke-captcha-info-disclosure(48792)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44824 JVNDB-2009-005831 Raven Web Services RavenNuke の images/captcha.php におけるローカルファイルの存在を特定される脆弱性 Raven Web Services RavenNuke の images/captcha.php には、register_globals が有効になっている際、存在するパス名と存在しないパス名で異なるエラーメッセージを返すため、ローカルファイルの存在を特定される脆弱性が存在します。 CVE-2009-0674 38105 CVE-2009-0674 48000 6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005831.html 2009-02-18 2012-12-20 View