Lucene search

RedhatCVE-2012-2327

HistoryAug 13, 2012 - 6:55 p.m.

CVE-2012-2327

2012-08-1318:55:03

CWE-200

redhat

web.nvd.nist.gov

mybb

mybulletinboard

cve-2012-2327

security vulnerability

remote attack

sensitive information

forumread cookie

installation path disclosure

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.004

Percentile

72.4%

JSON

MyBB (aka MyBulletinBoard) before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message.

Affected configurations

Nvd

Node

mybbmybbRange≤1.6.6

mybbmybbMatch1.00

mybbmybbMatch1.0beta4

mybbmybbMatch1.0pr1

mybbmybbMatch1.0pr2

mybbmybbMatch1.0rc1

mybbmybbMatch1.0rc2

mybbmybbMatch1.0rc3

mybbmybbMatch1.0rc4

mybbmybbMatch1.01

mybbmybbMatch1.1.0

mybbmybbMatch1.1.1

mybbmybbMatch1.1.2

mybbmybbMatch1.1.3

mybbmybbMatch1.1.4

mybbmybbMatch1.1.5

mybbmybbMatch1.1.6

mybbmybbMatch1.1.7

mybbmybbMatch1.1.8

mybbmybbMatch1.02

mybbmybbMatch1.2.0

mybbmybbMatch1.2.1

mybbmybbMatch1.2.2

mybbmybbMatch1.2.3

mybbmybbMatch1.2.4

mybbmybbMatch1.2.5

mybbmybbMatch1.2.6

mybbmybbMatch1.2.7

mybbmybbMatch1.2.8

mybbmybbMatch1.2.9

mybbmybbMatch1.2.10

mybbmybbMatch1.2.11

mybbmybbMatch1.2.12

mybbmybbMatch1.2.13

mybbmybbMatch1.2.14

mybbmybbMatch1.03

mybbmybbMatch1.3pre-1.0

mybbmybbMatch1.04

mybbmybbMatch1.4.0

mybbmybbMatch1.4.1

mybbmybbMatch1.4.2

mybbmybbMatch1.4.3

mybbmybbMatch1.4.4

mybbmybbMatch1.4.5

mybbmybbMatch1.4.6

mybbmybbMatch1.4.7

mybbmybbMatch1.4.8

mybbmybbMatch1.4.9

mybbmybbMatch1.4.10

mybbmybbMatch1.4.11

mybbmybbMatch1.4.12

mybbmybbMatch1.4.13

mybbmybbMatch1.4.14

mybbmybbMatch1.4.15

mybbmybbMatch1.4.16

mybbmybbMatch1.5.1

mybbmybbMatch1.5.2

mybbmybbMatch1.6.1

mybbmybbMatch1.6.2

mybbmybbMatch1.6.3

mybbmybbMatch1.6.4

mybbmybbMatch1.6.5

VendorProductVersionCPE
mybbmybb*cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*
mybbmybb1.00cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*
mybbmybb1.0cpe:2.3:a:mybb:mybb:1.0:beta4:*:*:*:*:*:*
mybbmybb1.0cpe:2.3:a:mybb:mybb:1.0:pr1:*:*:*:*:*:*
mybbmybb1.0cpe:2.3:a:mybb:mybb:1.0:pr2:*:*:*:*:*:*
mybbmybb1.0cpe:2.3:a:mybb:mybb:1.0:rc1:*:*:*:*:*:*
mybbmybb1.0cpe:2.3:a:mybb:mybb:1.0:rc2:*:*:*:*:*:*
mybbmybb1.0cpe:2.3:a:mybb:mybb:1.0:rc3:*:*:*:*:*:*
mybbmybb1.0cpe:2.3:a:mybb:mybb:1.0:rc4:*:*:*:*:*:*
mybbmybb1.01cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mybb	mybb	*	cpe:2.3:a:mybb:mybb::::::::
mybb	mybb	1.00	cpe:2.3:a:mybb:mybb:1.00:::::::*
mybb	mybb	1.0	cpe:2.3:a:mybb:mybb:1.0:beta4::::::
mybb	mybb	1.0	cpe:2.3:a:mybb:mybb:1.0:pr1::::::
mybb	mybb	1.0	cpe:2.3:a:mybb:mybb:1.0:pr2::::::
mybb	mybb	1.0	cpe:2.3:a:mybb:mybb:1.0:rc1::::::
mybb	mybb	1.0	cpe:2.3:a:mybb:mybb:1.0:rc2::::::
mybb	mybb	1.0	cpe:2.3:a:mybb:mybb:1.0:rc3::::::
mybb	mybb	1.0	cpe:2.3:a:mybb:mybb:1.0:rc4::::::
mybb	mybb	1.01	cpe:2.3:a:mybb:mybb:1.01:::::::*

Rows per page:

1-10 of 621

References

blog.mybb.com/2012/04/01/mybb-1-6-7-update-1-8-development/

www.openwall.com/lists/oss-security/2012/05/07/13

www.openwall.com/lists/oss-security/2012/05/07/14

www.securityfocus.com/bid/53417

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.004

Percentile

72.4%

JSON

Related for CVE-2012-2327