NVD

Id
48231  
Name
CVE-2009-0919  
Description
XAMPP installs multiple packages with insecure default passwords, which makes it easier for remote attackers to obtain access via (1) the "lampp" default password for the "nobody" account within the included ProFTPD installation, (2) a blank default password for the "root" account within the included MySQL installation, (3) a blank default password for the "pma" account within the phpMyAdmin installation, and possibly other unspecified passwords. NOTE: this was originally reported as a problem in DFLabs PTK, but this issue affects any product that is installed within the XAMPP environment, and should not be viewed as a vulnerability within that product. NOTE: DFLabs states that PTK is intended for use in a laboratory with "no contact from / to internet."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-03-16  
Modified Date
2011-03-07  
Seq
2009-0919  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242423 48231 CVE-2009-0919 http://ptk.dflabs.com/security.html  View
242424 48231 CVE-2009-0919 http://www.apachefriends.org/en/faq-xampp-linux.html  View
242425 48231 CVE-2009-0919 http://www.debianhelp.co.uk/xampp.htm  View
242426 48231 CVE-2009-0919 http://www.ibm.com/developerworks/linux/library/l-xampp/  View
242427 48231 CVE-2009-0919 ptk-default-password(49306)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42288 JVNDB-2009-003295 XAMPP におけるアクセス権を取得される脆弱性 XAMPP は、安全でないパスワードで複数のパッケージをインストールするため、アクセス権を取得される脆弱性が存在します。 CVE-2009-0919 38350 CVE-2009-0919 48231 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003295.html 2009-03-16 2012-06-26 View