MadBMS login issue

madbms-login (15684) The risk level is classified as MediumMedium Risk

Description:

An unspecified vulnerability related to the login function in MadBMS has an unknown impact and attack vector.


Consequences:

Other

Remedy:

Upgrade to the latest version of MadBMS (1.1.5 or later), available from the MadBMS Web page. See References.

References:

  • madBMS ChangeLog Web page: Release 1.1.5.
  • MadBMS Web page: User Login.
  • BID-10018: MadBMS Unspecified Login Vulnerability
  • BID-10019: Cactusoft CactuShop SQL Injection Vulnerability
  • BID-1002: Sambar Server Batch CGI Vulnerability
  • BID-10020: CactuSoft CactuShop Cross-Site Scripting Vulnerability
  • BID-10022: Roger Wilco Server UDP Datagram Handling Denial Of Service Vulnerability
  • BID-10024: Roger Wilco Information Disclosure Vulnerability
  • BID-10025: Roger Wilco Server Unauthorized Audio Stream Denial Of Service Vulnerability
  • BID-10026: ADA IMGSVR Remote Directory Listing Vulnerability
  • BID-10027: ADA IMGSVR Remote File Download Vulnerability
  • BID-10028: OpenBSD ISAKMPD Zero Payload Length Denial Of Service Vulnerability
  • BID-1003: FTPx FTP Explorer Weak Password Encryption Vulnerability
  • BID-10033: HAHTsite Scenario Server Project File Name Buffer Overrun Vulnerability
  • BID-10036: Macromedia Dreamweaver Remote User Database Access Vulnerability
  • CVE-2004-2470: Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins.
  • OSVDB ID: 4756: MadBMS Unspecified Login
  • SA11256: MadBMS Unspecified Login Vulnerability

Platforms Affected:

  • Jon Kotek MadBMS prior to 1.1.5

Reported:

Mar 31, 2004

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

For corrections or additions please email xforce@iss.net

Return to the main page