Lucene search

[email protected]CVE-2009-4368

HistoryDec 21, 2009 - 4:30 p.m.

CVE-2009-4368

2009-12-2116:30:00

[email protected]

web.nvd.nist.gov

cve-2009-4368

centreon

unspecified vulnerabilities

ping tool

traceroute tool

ldap import

improper authentication

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.7%

JSON

Multiple unspecified vulnerabilities in Centreon before 2.1.4 have unknown impact and attack vectors in the (1) ping tool, (2) traceroute tool, and (3) ldap import, possibly related to improper authentication.

Affected configurations

NVD

Node

merethiscentreonRange≤2.1.3

merethiscentreonMatch1.4

merethiscentreonMatch1.4.1

merethiscentreonMatch1.4.2

merethiscentreonMatch1.4.2.1

merethiscentreonMatch1.4.2.2

merethiscentreonMatch1.4.2.3

merethiscentreonMatch1.4.2.4

merethiscentreonMatch1.4.2.5

merethiscentreonMatch1.4.2.6

merethiscentreonMatch1.4.2.7

merethiscentreonMatch2.0b2

merethiscentreonMatch2.0b3

merethiscentreonMatch2.0b4

merethiscentreonMatch2.0b5

merethiscentreonMatch2.0b6

merethiscentreonMatch2.0rc1

merethiscentreonMatch2.0rc2

merethiscentreonMatch2.0rc3

merethiscentreonMatch2.0rc4

merethiscentreonMatch2.0rc5

merethiscentreonMatch2.0.1

merethiscentreonMatch2.0.2

merethiscentreonMatch2.1.0

merethiscentreonMatch2.1.1

merethiscentreonMatch2.1.2

CPENameOperatorVersion
merethis:centreonmerethis centreonle2.1.3
merethis:centreonmerethis centreoneq1.4
merethis:centreonmerethis centreoneq1.4.1
merethis:centreonmerethis centreoneq1.4.2
merethis:centreonmerethis centreoneq1.4.2.1
merethis:centreonmerethis centreoneq1.4.2.2
merethis:centreonmerethis centreoneq1.4.2.3
merethis:centreonmerethis centreoneq1.4.2.4
merethis:centreonmerethis centreoneq1.4.2.5
merethis:centreonmerethis centreoneq1.4.2.6

CPE	Name	Operator	Version
merethis:centreon	merethis centreon	le	2.1.3
merethis:centreon	merethis centreon	eq	1.4
merethis:centreon	merethis centreon	eq	1.4.1
merethis:centreon	merethis centreon	eq	1.4.2
merethis:centreon	merethis centreon	eq	1.4.2.1
merethis:centreon	merethis centreon	eq	1.4.2.2
merethis:centreon	merethis centreon	eq	1.4.2.3
merethis:centreon	merethis centreon	eq	1.4.2.4
merethis:centreon	merethis centreon	eq	1.4.2.5
merethis:centreon	merethis centreon	eq	1.4.2.6

Rows per page:

1-10 of 171

References

osvdb.org/61183

secunia.com/advisories/37808

www.centreon.com/Development/changelog-2x.html

www.securityfocus.com/bid/37383

www.vupen.com/english/advisories/2009/3578

exchange.xforce.ibmcloud.com/vulnerabilities/54893

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.7%

JSON

Related for CVE-2009-4368

prion1 openvas2 cvelist1 nvd1