CVE-2008-1857

Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) dirn and (2) fname parameters.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/29685	Vendor Advisory
http://www.securityfocus.com/bid/28659	Exploit
http://www.vupen.com/english/advisories/2008/1141/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41681
https://www.exploit-db.com/exploits/5394
http://secunia.com/advisories/29685	Vendor Advisory
http://www.securityfocus.com/bid/28659	Exploit
http://www.vupen.com/english/advisories/2008/1141/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41681
https://www.exploit-db.com/exploits/5394

Configurations

Configuration 1 (hide)

cpe:2.3:a:mole:make_our_life_easy:2.1.0:*:*:*:*:*:*:*

History

21 Nov 2024, 00:45

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/29685 - Vendor Advisory~~	() http://secunia.com/advisories/29685 - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/28659 - Exploit~~	() http://www.securityfocus.com/bid/28659 - Exploit
References	~~() http://www.vupen.com/english/advisories/2008/1141/references -~~	() http://www.vupen.com/english/advisories/2008/1141/references -
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/41681 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/41681 -
References	~~() https://www.exploit-db.com/exploits/5394 -~~	() https://www.exploit-db.com/exploits/5394 -

Information

Published : 2008-04-16 19:05

Updated : 2024-11-21 00:45

NVD link : CVE-2008-1857

Mitre link : CVE-2008-1857

CVE.ORG link : CVE-2008-1857

JSON object : View

Products Affected

mole

make_our_life_easy

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2008-1857", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2008-04-16T19:05:00.000", "references": [{"url": "http://secunia.com/advisories/29685", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/28659", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/1141/references", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41681", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/5394", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/29685", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/28659", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/1141/references", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41681", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/5394", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) dirn and (2) fname parameters."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de salto de directorio en viewsource.php de Make our Life Easy (Mole) 2.1.0, permite a atacantes remotos leer ficheros de su elecci\u00f3n a trav\u00e9s de secuencias de salto de directorio en los par\u00e1metros (1) dirn y (2) fname."}], "lastModified": "2024-11-21T00:45:31.013", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mole:make_our_life_easy:2.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF5EAC2D-493A-488D-95E1-4023A94EAC97"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}