Lucene search

MitreCVE-2009-1590

HistoryMay 08, 2009 - 6:30 p.m.

CVE-2009-1590

2009-05-0818:30:00

mitre

web.nvd.nist.gov

vulnerability

cgi

rescue form2mail

remote attackers

web form

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

73.9%

JSON

Unspecified vulnerability in CGI RESCUE FORM2MAIL before 1.42 allows remote attackers to send email to arbitrary recipients via a web form.

Affected configurations

Nvd

Node

cgi_rescueform2mailRange≤1.41

cgi_rescueform2mailMatch1.21

VendorProductVersionCPE
cgi_rescueform2mail*cpe:2.3:a:cgi_rescue:form2mail:*:*:*:*:*:*:*:*
cgi_rescueform2mail1.21cpe:2.3:a:cgi_rescue:form2mail:1.21:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cgi_rescue	form2mail	*	cpe:2.3:a:cgi_rescue:form2mail::::::::
cgi_rescue	form2mail	1.21	cpe:2.3:a:cgi_rescue:form2mail:1.21:::::::*

References

jvn.jp/en/jp/JVN76370393/index.html

jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000023.html

osvdb.org/54097

secunia.com/advisories/34869

www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081213132937

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

73.9%

JSON

Related for CVE-2009-1590