sábado, 7 de febrero de 2009

Simple Machines Forum Password Reset Security Bypass Vulnerability

Bugtraq ID: 33219
Class: Access Validation Error
CVE:
Remote: Yes
Local: No
Published: Jan 12 2009 12:00AM
Updated: Feb 06 2009 11:18PM
Credit: Xianur0
Vulnerable: Simple Machines SMF 1.1.5
Simple Machines SMF 1.1.5
Simple Machines SMF 1.1.4
Simple Machines SMF 1.1.3
Simple Machines SMF 1.1.2
Simple Machines SMF 1.1.1
Simple Machines SMF 1.1 rc3
Simple Machines SMF 1.1 rc3
Simple Machines SMF 1.1 rc2
Simple Machines SMF 1.1 rc1
Simple Machines SMF 1.1 final
Simple Machines SMF 1.0.13
Simple Machines SMF 1.0.13
Simple Machines SMF 1.0.12
Simple Machines SMF 1.0.12
Simple Machines SMF 1.0.11
Simple Machines SMF 1.0.10
Simple Machines SMF 1.0.9
Simple Machines SMF 1.0.8
Simple Machines SMF 1.0.8
Simple Machines SMF 1.0.7
Simple Machines SMF 1.0.6
Simple Machines SMF 1.0.5
Simple Machines SMF 1.0.4
Simple Machines SMF 1.0.3
Simple Machines SMF 1.0.2
Simple Machines SMF 1.0.1
Simple Machines SMF 1.0 -beta5p
Simple Machines SMF 1.0 -beta4p
Simple Machines SMF 1.0 -beta4.1
Simple Machines Simple Machines Forum 1.1.5
Simple Machines Simple Machines Forum 1.1.4
Simple Machines Simple Machines Forum 1.1.3
Simple Machines Simple Machines Forum 1.1.2
Simple Machines Simple Machines Forum 1.1.1

Not Vulnerable: Simple Machines Simple Machines Forum 1.1.6
Simple Machines Simple Machines Forum 1.0.14

Attackers can exploit this issue via a browser.

The following exploit code is available:

http://www.securityfocus.com/data/vulnerabilities/exploits/33219.pl

No hay comentarios.:

Publicar un comentario

Déjanos tu comentario, nos permitirá mejorar.
¿Qué opinas de este tema?
¿Tienes alguna duda o sugerencia?
¿Te parece adecuado y completo este tema?
¿Falta información? ¿Cual?

Etiquetas

INTERNET (459) newsweek (305) SEGURIDAD (224) software (136) HACK (86) GOOGLE (47) Hacker (46) Geek (41) hardware (36) WINDOWS (34) Hackers (31) CRACK (29) facebook (29) video (28) DESCARGA (27) videos (26) Celulares (25) MICROSOFT (22) Informatica (21) apple (19) GRATIS (18) technology (18) virus (18) exploit (17) computación (16) informatico (16) web (15) cracker (14) INALAMBRICO (13) WINDOWS 7 (13) noticias (11) MSN (10) termino (10) ACTUALIZACION (9) Gamer (9) LapTops (9) Mac (9) PASSWORD (9) WINDOWS XP (9) dns (9) firefox (9) juegos (9) FOTOS (8) cientifico (8) iphone (8) WEP (7) antivirus (7) bibliografia (7) Desencriptar (6) INFINITUM (6) wifi (6) youtube (6) Craker (5) Culiacan (5) DESMOSTRACION (5) TELEFONIA (5) gmail (5) messenger (5) DIRECTA (4) DOWNLOAD (4) ESPAÑOL (4) XBOX (4) xss (4) Glosario (3) HTML (3) WPA (3) anuncios (3) ataques (3) hosting (3) hotmail (3) Guru (2) ajax (2) wpa2 (2)