NVD

Id
8104  
Name
CVE-2011-1128  
Description
The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13, and 2.x before 2.0 RC5, does not properly handle invalid login attempts, which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-06-20  
Modified Date
2011-06-29  
Seq
2011-1128  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46310 8104 CVE-2011-1128 http://custom.simplemachines.org/mods/downloads/smf_patch_2.0-RC4_security.zip  View
46311 8104 CVE-2011-1128 [oss-security] 20110222 CVE request: simple machines forum before 1.1.13  View
46312 8104 CVE-2011-1128 [oss-security] 20110302 Re: CVE request: simple machines forum before 1.1.13  View
46313 8104 CVE-2011-1128 http://www.simplemachines.org/community/index.php?topic=421547.0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34103 JVNDB-2011-004345 SMF の loadUserSettings 関数におけるアクセスを取得される脆弱性 Simple Machines Forum (SMF) の Load.php の loadUserSettings 関数は、無効なログイン試行を適切に処理しないため、アクセスを取得される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-1128 49035 CVE-2011-1128 8104 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004345.html 2011-02-11 2012-03-27 View