OpenBiblio < 0.6.0 Multiple Vulnerabilities

High Nessus Network Monitor Plugin ID 4327

Synopsis

The remote host is missing a critical security patch or upgrade.

Description

According to its version number, the remote host is running a version of OpenBiblio that is vulnerable to a number of flaws.

OpenBiblio is an open-source, web-based library system. The vendor has released version 0.6.0 which addresses a number of flaws. An attacker exploiting these flaws would only require the ability to access the OpenBiblio web interface. Successful exploitation would allow the attacker to read confidential data and execute malicious code on the local server, database server and client browser.

Solution

Upgrade to version 0.6.0 or higher.

See Also

http://obiblio.sourceforge.net

Plugin Details

Severity: High

ID: 4327

File Name: 4327.prm

Family: Web Servers

Published: 2007/12/28

Modified: 2017/01/31

Dependencies: 1442

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

CVSSv3

Base Score: 7.3

Temporal Score: 6.8

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:F/RL:O/RC:C

Reference Information

CVE: CVE-2006-5149, CVE-2007-6606, CVE-2007-6607, CVE-2007-6608

BID: 27053