Lucene search
HistoryApr 25, 2007 - 3:19 p.m.
CVE-2007-2233
cosign
authentication
impersonation
security vulnerability
cve-2007-2233
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.5%
cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR (\r) sequences in the service parameter to inject LOGIN and REGISTER commands with the desired username.
Affected configurations
Node
cosigncosignMatch0.7.0
ORcosigncosignMatch0.8.0
ORcosigncosignMatch0.9.0
ORcosigncosignMatch1.0
ORcosigncosignMatch1.1
ORcosigncosignMatch1.5
ORcosigncosignMatch1.6
ORcosigncosignMatch1.7
ORcosigncosignMatch1.8
ORcosigncosignMatch1.8.5
ORcosigncosignMatch1.9
ORcosigncosignMatch2.0.1
ORcosigncosignMatch2.0.2
Related
cvelist
cvelist
CVE-2007-2233
2007-04-25 15:00:00
nvd
nvd
CVE-2007-2233
2007-04-25 15:19:00
prion
prion
Command injection
2007-04-25 15:19:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
6.6 Medium
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.5%
Related for CVE-2007-2233