Lucene search
MitreCVE-2007-4609HistoryAug 31, 2007 - 12:17 a.m.
CVE-2007-4609
2007-08-3100:17:00
CWE-264
mitre
web.nvd.nist.gov
23
eyeos
access control
checksum
remote attack
denial of service
unauthorized activities
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
AI Score
6.7
Confidence
High
EPSS
0.008
Percentile
81.2%
eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessing valid parameter values.
Affected configurations
Node
eyeos_projecteyeos
| Vendor | Product | Version | CPE |
|---|---|---|---|
| eyeos_project | eyeos | * | cpe:2.3:o:eyeos_project:eyeos:*:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2007-4609
2007-08-31 00:17:00
cvelist
cvelist
CVE-2007-4609
2007-08-31 00:00:00
prion
prion
Design/Logic Flaw
2007-08-31 00:17:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
AI Score
6.7
Confidence
High
EPSS
0.008
Percentile
81.2%
Related for CVE-2007-4609