Vulnerability Description
There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted beyond the SMF deployment. This vulnerability allows them to read arbitrary files on the filesystem and therefore gain new privileges by reading the settings.php with the database passwords.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Simplemachines | Simple Machines Forum | <= 2.0.3 |
Related Weaknesses (CWE)
References
- http://www.openwall.com/lists/oss-security/2013/02/01/4Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2013/02/01/4Mailing ListThird Party Advisory
FAQ
What is CVE-2009-5068?
CVE-2009-5068 is a vulnerability with a CVSS score of 7.2 (HIGH). There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "co-admins" that are not trusted...
How severe is CVE-2009-5068?
CVE-2009-5068 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-5068?
Check the references section above for vendor advisories and patch information. Affected products include: Simplemachines Simple Machines Forum.