CVEvulnerability
CVE-2007-4609
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-08-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
- Weaknesses
- CWE-264
Description
eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessing valid parameter values.
Affected configurations
• eyeos project eyeos
Related
Weakness · not in database (1)
References
- http://osvdb.org/45836 osvdb.org
- http://securityreason.com/securityalert/3081 securityreason.com
- http://www.securityfocus.com/archive/1/477866/100/0/threaded www.securityfocus.com
- http://osvdb.org/45836 osvdb.org
- http://securityreason.com/securityalert/3081 securityreason.com
- http://www.securityfocus.com/archive/1/477866/100/0/threaded www.securityfocus.com