CVE-2007-4609

eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts via doCreateUser actions, add many eyeBoard messages via addMsg actions, and cause a denial of service or conduct certain unauthorized activities, by guessing valid parameter values.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2007-08-31

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Eyeos (Eyeos Project)

References

• http://osvdb.org/45836
• http://securityreason.com/securityalert/3081
• http://www.securityfocus.com/archive/1/477866/100/0/threaded