CVE-2009-4449

Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery, allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery parameters, related to (1) admin/modules/user/users.php and (2) usercp.php.

CVSS v2.0 6.3 MEDIUM

6.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:S/C:C/I:N/A:N

Exploitability : 6.8 / Impact : 6.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/	Patch Vendor Advisory
http://osvdb.org/61359
http://www.securityfocus.com/bid/37489
http://www.vupen.com/english/advisories/2009/3651	Vendor Advisory
http://dev.mybboard.net/issues/617
http://secunia.com/advisories/37906	Vendor Advisory
http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/admin/modules/user/users.php	Exploit
http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/usercp.php	Exploit
http://openwall.com/lists/oss-security/2010/10/08/7
http://openwall.com/lists/oss-security/2010/10/11/8
http://openwall.com/lists/oss-security/2010/12/06/2

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:mybboard:mybb:1.4.10:*:*:*:*:*:*:*

Information

Published : 2009-12-29 12:41

Updated : 2011-01-03 22:37

NVD link : CVE-2009-4449

Mitre link : CVE-2009-4449

JSON object : View

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Advertisement

Products Affected

mybboard

mybb

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/", "name": "http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://osvdb.org/61359", "name": "61359", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.securityfocus.com/bid/37489", "name": "37489", "tags": [], "refsource": "BID"}, {"url": "http://www.vupen.com/english/advisories/2009/3651", "name": "ADV-2009-3651", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://dev.mybboard.net/issues/617", "name": "http://dev.mybboard.net/issues/617", "tags": [], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/37906", "name": "37906", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/admin/modules/user/users.php", "name": "http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/admin/modules/user/users.php", "tags": ["Exploit"], "refsource": "CONFIRM"}, {"url": "http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/usercp.php", "name": "http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/usercp.php", "tags": ["Exploit"], "refsource": "CONFIRM"}, {"url": "http://openwall.com/lists/oss-security/2010/10/08/7", "name": "[oss-security] 20101008 CVE request: mybb before 1.4.11 and before 1.4.12", "tags": [], "refsource": "MLIST"}, {"url": "http://openwall.com/lists/oss-security/2010/10/11/8", "name": "[oss-security] 20101011 Re: CVE request: mybb before 1.4.11 and before 1.4.12", "tags": [], "refsource": "MLIST"}, {"url": "http://openwall.com/lists/oss-security/2010/12/06/2", "name": "[oss-security] 20101206 Re: CVE request: mybb before 1.4.11 and before 1.4.12", "tags": [], "refsource": "MLIST"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery, allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery parameters, related to (1) admin/modules/user/users.php and (2) usercp.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-22"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2009-4449", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:C/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "severity": "MEDIUM", "impactScore": 6.9, "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2009-12-29T20:41Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:mybboard:mybb:1.4.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2011-01-04T06:37Z"}