Lucene search

[email protected]CVE-2004-1968

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-1968

2005-05-1004:00:00

[email protected]

web.nvd.nist.gov

open bulletin board

openbb

cve-2004-1968

security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.6%

JSON

The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter.

Affected configurations

NVD

Node

openbbopenbbMatch1.0_.0_beta1

openbbopenbbMatch1.0_.0_rc1

openbbopenbbMatch1.0_.0_rc2

openbbopenbbMatch1.0_.0_rc3

openbbopenbbMatch1.0_.5

openbbopenbbMatch1.0_.6

CPENameOperatorVersion
openbb:openbbopenbbeq1.0_.0_beta1
openbb:openbbopenbbeq1.0_.0_rc1
openbb:openbbopenbbeq1.0_.0_rc2
openbb:openbbopenbbeq1.0_.0_rc3
openbb:openbbopenbbeq1.0_.5
openbb:openbbopenbbeq1.0_.6

CPE	Name	Operator	Version
openbb:openbb	openbb	eq	1.0_.0_beta1
openbb:openbb	openbb	eq	1.0_.0_rc1
openbb:openbb	openbb	eq	1.0_.0_rc2
openbb:openbb	openbb	eq	1.0_.0_rc3
openbb:openbb	openbb	eq	1.0_.5
openbb:openbb	openbb	eq	1.0_.6

References

marc.info/?l=bugtraq&m=108301983206107&w=2

secunia.com/advisories/11481

securitytracker.com/id?1009935

www.securityfocus.com/bid/10217

exchange.xforce.ibmcloud.com/vulnerabilities/15970

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.1 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.6%

JSON

Related for CVE-2004-1968

cvelist1 nvd1