ubuntu · CVE-2008-6844

Quick triage

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2008-6844 medium priority: Ubuntu including 1 source packages (ezpublish), 6 status rows across 6 suites (dapper, hardy, intrepid, jaunty, karmic, upstream): DNE 4, ignored 1, needs-triage 1.

Description:

The registration view (/user/register) in eZ Publish 3.5.6 and earlier, and possibly other versions before 3.9.5, 3.10.1, and 4.0.1, allows remote attackers to gain privileges as other users via modified ContentObjectAttribute_data_user_login_30, ContentObjectAttribute_data_user_password_30, and other parameters.