Vulnerabilities > CVE-2007-6379 - Configuration vulnerability in Badblue
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Common Weakness Enumeration (CWE)
Exploit-Db
description | BadBlue. CVE-2007-6377,CVE-2007-6378,CVE-2007-6379. Remote exploit for windows platform |
id | EDB-ID:4715 |
last seen | 2016-01-31 |
modified | 2007-12-10 |
published | 2007-12-10 |
reporter | Luigi Auriemma |
source | https://www.exploit-db.com/download/4715/ |
title | badblue <= 2.72b - Multiple Vulnerabilities |
Packetstorm
data source | https://packetstormsecurity.com/files/download/62071/badblue-overflow.txt |
id | PACKETSTORM:62071 |
last seen | 2016-12-05 |
published | 2007-12-25 |
reporter | acaro |
source | https://packetstormsecurity.com/files/62071/badblue-overflow.txt.html |
title | badblue-overflow.txt |
Seebug
bulletinFamily | exploit |
description | No description provided by source. |
id | SSV:7705 |
last seen | 2017-11-19 |
modified | 2007-12-25 |
published | 2007-12-25 |
reporter | Root |
source | https://www.seebug.org/vuldb/ssvid-7705 |
title | BadBlue 2.72 PassThru Remote Buffer Overflow Exploit |
References
- http://aluigi.altervista.org/adv/badblue-adv.txt
- http://aluigi.altervista.org/adv/badblue-adv.txt
- http://osvdb.org/42418
- http://osvdb.org/42418
- http://secunia.com/advisories/28031
- http://secunia.com/advisories/28031
- http://securityreason.com/securityalert/3448
- http://securityreason.com/securityalert/3448
- http://www.securityfocus.com/archive/1/484834/100/0/threaded
- http://www.securityfocus.com/archive/1/484834/100/0/threaded
- http://www.securityfocus.com/bid/26803
- http://www.securityfocus.com/bid/26803
- http://www.vupen.com/english/advisories/2007/4160
- http://www.vupen.com/english/advisories/2007/4160