Lucene search
MitreCVE-2009-2344HistoryJul 07, 2009 - 7:30 p.m.
CVE-2009-2344
2009-07-0719:30:00
CWE-264
mitre
web.nvd.nist.gov
26
sourcefire
defense center
3d sensor
privilege escalation
cve-2009-2344
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.054
Percentile
93.2%
The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an edit action to admin/user/user.cgi and unspecified other components.
Affected configurations
Node
sourcefire3d_sensorRange≤4.8.1
ORsourcefire3d_sensorMatch4.8
ORsourcefire3d_sensorMatch4.8.0.3
ORsourcefire3d_sensorMatch4.8.0.4
ORsourcefiredefense_centerRange≤4.8.1
ORsourcefiredefense_centerMatch4.8
ORsourcefiredefense_centerMatch4.8.0.3
ORsourcefiredefense_centerMatch4.8.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sourcefire | 3d_sensor | * | cpe:2.3:h:sourcefire:3d_sensor:*:*:*:*:*:*:*:* |
| sourcefire | 3d_sensor | 4.8 | cpe:2.3:h:sourcefire:3d_sensor:4.8:*:*:*:*:*:*:* |
| sourcefire | 3d_sensor | 4.8.0.3 | cpe:2.3:h:sourcefire:3d_sensor:4.8.0.3:*:*:*:*:*:*:* |
| sourcefire | 3d_sensor | 4.8.0.4 | cpe:2.3:h:sourcefire:3d_sensor:4.8.0.4:*:*:*:*:*:*:* |
| sourcefire | defense_center | * | cpe:2.3:h:sourcefire:defense_center:*:*:*:*:*:*:*:* |
| sourcefire | defense_center | 4.8 | cpe:2.3:h:sourcefire:defense_center:4.8:*:*:*:*:*:*:* |
| sourcefire | defense_center | 4.8.0.3 | cpe:2.3:h:sourcefire:defense_center:4.8.0.3:*:*:*:*:*:*:* |
| sourcefire | defense_center | 4.8.0.4 | cpe:2.3:h:sourcefire:defense_center:4.8.0.4:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Sourcefire 3D Sensor & Defense Center 4.8.x - Privilege Escalation
2009-07-02 00:00:00
prion
prion
Code injection
2009-07-07 19:30:00
nvd
nvd
CVE-2009-2344
2009-07-07 19:30:00
cvelist
cvelist
CVE-2009-2344
2009-07-07 19:00:00
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.054
Percentile
93.2%
Related for CVE-2009-2344