NVD

Id
56544  
Name
CVE-2007-4419  
Description
Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-18  
Modified Date
2008-11-15  
Seq
2007-4419  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
288085 56544 CVE-2007-4419 http://myimei.com/security/2007-08-16/olate-download-341adminphpauthentication-bypassing.html  View
288086 56544 CVE-2007-4419 3028  View
288087 56544 CVE-2007-4419 http://sourceforge.net/forum/forum.php?forum_id=727807  View
288088 56544 CVE-2007-4419 http://sourceforge.net/project/shownotes.php?group_id=188052&release_id=533628  View
288089 56544 CVE-2007-4419 http://sourceforge.net/project/shownotes.php?release_id=533628&group_id=188052  View
288090 56544 CVE-2007-4419 20070816 Olate Download 3.4.1 ~ admin.php ~ Admin authentication bypassing  View
288091 56544 CVE-2007-4419 20070821 Re: Olate Download 3.4.1 ~ admin.php ~ Admin authentication bypassing  View
288092 56544 CVE-2007-4419 25343  View
288093 56544 CVE-2007-4419 olatedownload-admin-security-bypass(36088)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55609 JVNDB-2007-004301 od の Admin.php における Admin エリアへアクセスされる脆弱性 Olate Download (od) の Admin.php は、admin username、user id、および group id のMD5 ハッシュを使用して OD3_AutoLogin 認証クッキーを構成するため、クッキーを推測される、および Admin エリアへアクセスされる脆弱性が存在します。 CVE-2007-4419 27774 CVE-2007-4419 56544 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004301.html 2007-08-18 2012-09-25 View