Lucene search
HistoryApr 21, 2009 - 6:30 p.m.
CVE-2008-6739
cve-2008-6739
todd woolums asp
download management script
authentication bypass
remote attack
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request.
Affected configurations
Node
toddwoolumsasp_downloadMatch1.03
| CPE | Name | Operator | Version |
|---|---|---|---|
| toddwoolums:asp_download | toddwoolums asp download | eq | 1.03 |
Related
nvd
nvd
CVE-2008-6739
2009-04-21 18:30:00
cvelist
cvelist
CVE-2008-6739
2009-04-21 18:07:00
prion
prion
Design/Logic Flaw
2009-04-21 18:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.5%
Related for CVE-2008-6739