7.5

CVE-2008-3375

Exploit
The jrCookie function in includes/jamroom-misc.inc.php in JamRoom before 3.4.0 allows remote attackers to bypass authentication and gain administrative access via a boolean value within serialized data in a JMU_Cookie cookie.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Jamroom ≫ Jamroom Version <= 3.3.8
Jamroom ≫ Jamroom Version 1.0
Jamroom ≫ Jamroom Version 1.0 Update b1
Jamroom ≫ Jamroom Version 1.0 Update b2
Jamroom ≫ Jamroom Version 1.0 Update b3
Jamroom ≫ Jamroom Version 1.0 Update b4
Jamroom ≫ Jamroom Version 1.0 Update b5
Jamroom ≫ Jamroom Version 2.0.9 Update a
Jamroom ≫ Jamroom Version 2.6.10
Jamroom ≫ Jamroom Version 2.6.11
Jamroom ≫ Jamroom Version 2.6.12
Jamroom ≫ Jamroom Version 2.60
Jamroom ≫ Jamroom Version 2.60 Update rc2
Jamroom ≫ Jamroom Version 2.60 Update rc3
Jamroom ≫ Jamroom Version 2.61
Jamroom ≫ Jamroom Version 2.62
Jamroom ≫ Jamroom Version 2.63
Jamroom ≫ Jamroom Version 2.64
Jamroom ≫ Jamroom Version 2.65
Jamroom ≫ Jamroom Version 2.66
Jamroom ≫ Jamroom Version 2.67
Jamroom ≫ Jamroom Version 2.68
Jamroom ≫ Jamroom Version 2.69
Jamroom ≫ Jamroom Version 3.0
Jamroom ≫ Jamroom Version 3.0 Update b1
Jamroom ≫ Jamroom Version 3.0 Update b2
Jamroom ≫ Jamroom Version 3.0 Update b3
Jamroom ≫ Jamroom Version 3.0 Update b4
Jamroom ≫ Jamroom Version 3.0 Update b5
Jamroom ≫ Jamroom Version 3.0 Update b6
Jamroom ≫ Jamroom Version 3.0 Update b7
Jamroom ≫ Jamroom Version 3.0 Update b8
Jamroom ≫ Jamroom Version 3.0.1
Jamroom ≫ Jamroom Version 3.0.2
Jamroom ≫ Jamroom Version 3.0.3
Jamroom ≫ Jamroom Version 3.0.4
Jamroom ≫ Jamroom Version 3.0.5
Jamroom ≫ Jamroom Version 3.0.6
Jamroom ≫ Jamroom Version 3.0.7
Jamroom ≫ Jamroom Version 3.0.8
Jamroom ≫ Jamroom Version 3.0.9
Jamroom ≫ Jamroom Version 3.0.10
Jamroom ≫ Jamroom Version 3.0.11
Jamroom ≫ Jamroom Version 3.0.12
Jamroom ≫ Jamroom Version 3.0.13
Jamroom ≫ Jamroom Version 3.0.14
Jamroom ≫ Jamroom Version 3.0.15
Jamroom ≫ Jamroom Version 3.0.16
Jamroom ≫ Jamroom Version 3.0.17
Jamroom ≫ Jamroom Version 3.0.18
Jamroom ≫ Jamroom Version 3.0.19
Jamroom ≫ Jamroom Version 3.0.20
Jamroom ≫ Jamroom Version 3.0.21
Jamroom ≫ Jamroom Version 3.0.22
Jamroom ≫ Jamroom Version 3.0.23
Jamroom ≫ Jamroom Version 3.0.24
Jamroom ≫ Jamroom Version 3.0.25
Jamroom ≫ Jamroom Version 3.0.26
Jamroom ≫ Jamroom Version 3.0.27
Jamroom ≫ Jamroom Version 3.0.28
Jamroom ≫ Jamroom Version 3.0.29
Jamroom ≫ Jamroom Version 3.0.30
Jamroom ≫ Jamroom Version 3.1.0
Jamroom ≫ Jamroom Version 3.1.0 Update b1
Jamroom ≫ Jamroom Version 3.1.0 Update b2
Jamroom ≫ Jamroom Version 3.1.0 Update b3
Jamroom ≫ Jamroom Version 3.1.1
Jamroom ≫ Jamroom Version 3.1.2
Jamroom ≫ Jamroom Version 3.1.3
Jamroom ≫ Jamroom Version 3.1.4
Jamroom ≫ Jamroom Version 3.1.5
Jamroom ≫ Jamroom Version 3.2.0
Jamroom ≫ Jamroom Version 3.2.1
Jamroom ≫ Jamroom Version 3.2.2
Jamroom ≫ Jamroom Version 3.2.3
Jamroom ≫ Jamroom Version 3.2.4
Jamroom ≫ Jamroom Version 3.2.5
Jamroom ≫ Jamroom Version 3.2.6
Jamroom ≫ Jamroom Version 3.3.0
Jamroom ≫ Jamroom Version 3.3.1
Jamroom ≫ Jamroom Version 3.3.2
Jamroom ≫ Jamroom Version 3.3.3
Jamroom ≫ Jamroom Version 3.3.4
Jamroom ≫ Jamroom Version 3.3.5
Jamroom ≫ Jamroom Version 3.3.6
Jamroom ≫ Jamroom Version 3.3.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.56% 0.878
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://secunia.com/advisories/31249
Vendor Advisory
http://securityreason.com/securityalert/4069
http://www.gulftech.org/?node=research&article_id=00117-07282008
Exploit
http://www.jamroom.net/index.php?m=td_tracker&o=view&id=1178
http://www.jamroom.net/phpBB2/viewtopic.php?t=24454
Patch
http://www.securityfocus.com/archive/1/494820/100/0/threaded
http://www.securityfocus.com/bid/30406
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/44048