Lucene search

[email protected]CVE-2012-4328

HistoryAug 14, 2012 - 10:55 p.m.

CVE-2012-4328

2012-08-1422:55:02

[email protected]

web.nvd.nist.gov

cve

2012

4328

vbulletin

suite

forum

mapi

plugin

vulnerability

nvd

security

risk

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.9%

JSON

Unspecified vulnerability in the MAPI in vBulletin Suite 4.1.2 through 4.1.12, Forum 4.1.2 through 4.1.12, and the MAPI plugin 1.4.3 for vBulletin 3.x has unknown impact and attack vectors.

Affected configurations

NVD

Node

vbulletinmapiMatch1.4.3

vbulletinvbulletin_forumMatch4.1.2

vbulletinvbulletin_forumMatch4.1.12

vbulletinvbulletin_suiteMatch4.1.2

vbulletinvbulletin_suiteMatch4.1.12

AND

vbulletinvbulletinMatch3.0

vbulletinvbulletinMatch3.5

vbulletinvbulletinMatch3.6

vbulletinvbulletinMatch3.7

CPENameOperatorVersion
vbulletin:mapivbulletin mapieq1.4.3
vbulletin:vbulletin_forumvbulletin vbulletin forumeq4.1.2
vbulletin:vbulletin_forumvbulletin vbulletin forumeq4.1.12
vbulletin:vbulletin_suitevbulletin vbulletin suiteeq4.1.2
vbulletin:vbulletin_suitevbulletin vbulletin suiteeq4.1.12

CPE	Name	Operator	Version
vbulletin:mapi	vbulletin mapi	eq	1.4.3
vbulletin:vbulletin_forum	vbulletin vbulletin forum	eq	4.1.2
vbulletin:vbulletin_forum	vbulletin vbulletin forum	eq	4.1.12
vbulletin:vbulletin_suite	vbulletin vbulletin suite	eq	4.1.2
vbulletin:vbulletin_suite	vbulletin vbulletin suite	eq	4.1.12

References

osvdb.org/81474

secunia.com/advisories/48917

www.securityfocus.com/bid/53226

exchange.xforce.ibmcloud.com/vulnerabilities/75160

www.vbulletin.com/forum/showthread.php/400162-vBulletin-3-x-MAPI-Plugin-1-4-3-released-with-security-patch-04-23-2012

www.vbulletin.com/forum/showthread.php/400164-vBulletin-Security-Patch-for-vBulletin-4-1-2-4-1-11-for-Suite-amp-Forum-04-23-2012

www.vbulletin.com/forum/showthread.php/400165-vBulletin-Security-Patch-for-vBulletin-4-1-12-for-Suite-amp-Forum-04-23-2012

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.8 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.9%

JSON

Related for CVE-2012-4328

cvelist1 prion1 nvd1