Lucene search

Japan Vulnerability NotesJVN:94502417

HistoryJan 23, 2015 - 12:00 a.m.

JVN#94502417: shiromuku(bu2)BBS vulnerable to arbitrary file creation

2015-01-2300:00:00

Japan Vulnerability Notes

jvn.jp

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.5%

JSON

shiromuku(bu2)BBS from Perl CGI’s By Mrs. Shiromuku is a bulletin board software. shiromuku(bu2)BBS contains a vulnerability that may allow a remote attacker to create arbitrary files.

Impact

A remote attacker creating arbitrary files may result in arbitrary code execution on the server.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

shiromuku(bu2)BBS version2.90 and earlier

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.019 Low

EPSS

Percentile

88.5%

JSON

Related for JVN:94502417