NVD

Id
6781  
Name
CVE-2008-7050  
Description
The password_check function in auth/auth_phpbb3.php in WoW Raid Manager 3.5.1 before Patch 1, when using PHPBB3 authentication, (1) does not invoke the CheckPassword function with the required arguments, which always triggers an authentication failure, and (2) returns true instead of false when an authentication failure occurs, which allows remote attackers to bypass authentication and gain privileges with an arbitrary password.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2009-08-24  
Modified Date
2009-08-24  
Seq
2008-7050  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38697 6781 CVE-2008-7050 http://github.com/Illydth/wowraidmanager/commit/7dd6367ae85003dd5d715431b6ab695f2c2f200a  View
38698 6781 CVE-2008-7050 ADV-2008-3109  View
38699 6781 CVE-2008-7050 http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2153  View
38700 6781 CVE-2008-7050 http://www.wowraidmanager.net/e107_plugins/forum/forum_viewtopic.php?2167  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51331 JVNDB-2008-006641 WoW Raid Manager の auth/auth_phpbb3.php における認証を回避される脆弱性 WoW Raid Manager の auth/auth_phpbb3.php の password_check 関数は、PHPBB3 認証が使用されている際、以下の不備があるため、認証を回避される、および任意のパスワードで権限を取得される脆弱性が存在します。 CVE-2008-7050 37163 CVE-2008-7050 6781 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006641.html 2008-10-13 2012-12-20 View