Lucene search
HistoryAug 16, 2007 - 6:17 p.m.
CVE-2007-4374
cve-2007-4374
babo violent 2
message spoofing
authentication bypass
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.9%
Babo Violent 2 2.08.00 does not validate the sender field of a chat message composed by a client, which allows remote authenticated users to spoof messages.
Affected configurations
Node
rndlabsbabo_violentRange≤2.2.08.00
| CPE | Name | Operator | Version |
|---|---|---|---|
| rndlabs:babo_violent | rndlabs babo violent | le | 2.2.08.00 |
Related
prion
prion
Code injection
2007-08-16 18:17:00
cvelist
cvelist
CVE-2007-4374
2007-08-16 18:00:00
nvd
nvd
CVE-2007-4374
2007-08-16 18:17:00
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6.2 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.9%
Related for CVE-2007-4374