CVE-2007-5172

Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://forums.quicksilverforums.com/index.php?a=topic&t=1332	Patch
http://secunia.com/advisories/26998	Vendor Advisory
http://www.securityfocus.com/bid/25887
https://exchange.xforce.ibmcloud.com/vulnerabilities/36891
http://forums.quicksilverforums.com/index.php?a=topic&t=1332	Patch
http://secunia.com/advisories/26998	Vendor Advisory
http://www.securityfocus.com/bid/25887
https://exchange.xforce.ibmcloud.com/vulnerabilities/36891

Configurations

Configuration 1 (hide)

cpe:2.3:a:quicksilver_forums:quicksilver_forums:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:37

Type	Values Removed	Values Added
References	~~() http://forums.quicksilverforums.com/index.php?a=topic&t=1332 - Patch~~	() http://forums.quicksilverforums.com/index.php?a=topic&t=1332 - Patch
References	~~() http://secunia.com/advisories/26998 - Vendor Advisory~~	() http://secunia.com/advisories/26998 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/25887 -~~	() http://www.securityfocus.com/bid/25887 -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/36891 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/36891 -

Information

Published : 2007-10-01 20:17

Updated : 2024-11-21 00:37

NVD link : CVE-2007-5172

Mitre link : CVE-2007-5172

CVE.ORG link : CVE-2007-5172

JSON object : View

Products Affected

quicksilver_forums

quicksilver_forums

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2007-5172", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-10-01T20:17:00.000", "references": [{"url": "http://forums.quicksilverforums.com/index.php?a=topic&t=1332", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/26998", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25887", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36891", "source": "cve@mitre.org"}, {"url": "http://forums.quicksilverforums.com/index.php?a=topic&t=1332", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/26998", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/25887", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36891", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message."}, {"lang": "es", "value": "Quicksilver Forums before 1.4.1 permite a atacantes remotos obtener informaci\u00f3n confidencial al causar errores de conexi\u00f3n no especificados, que revelan la contrase\u00f1a de la base de datos en el mensaje de error resultante."}], "lastModified": "2024-11-21T00:37:18.330", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:quicksilver_forums:quicksilver_forums:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F435CE59-51BF-4DD2-A6C5-CC4EEFDA7032", "versionEndIncluding": "1.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}