« Volver al listado

CVE-2008-5723

Estado: ModificadaMedia (5)—

Directory traversal vulnerability in CGI RESCUE KanniBBS2000 (aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i) before 1.03 allows remote attackers to read arbitrary files via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cgi-rescue — Kannibbs2000Cgi-rescue — Kannibbs2000i

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-5723",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-12-26T17:30:00.547",
  "references": [
    {
      "url": "http://jvn.jp/en/jp/JVN86833991/index.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000078.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081113221811",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/32485",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46972",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://jvn.jp/en/jp/JVN86833991/index.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://jvndb.jvn.jp/en/contents/2008/JVNDB-2008-000078.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20081113221811",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/32485",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46972",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in CGI RESCUE KanniBBS2000 (aka KanniBBS2000i, MiniBBS2000, and MiniBBS2000i) before 1.03 allows remote attackers to read arbitrary files via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de salto de directorio en CGI RESCUE KanniBBS2000 (también conocido como KanniBBS2000i, MiniBBS2000 y MiniBBS2000i) antes de v1.03 permite a atacantes remotos leer archivos de su elección mediante vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:00:52.870",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cgi-rescue:kannibbs2000:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F69B1184-7D91-4635-852B-52EBFB0748CB",
              "versionEndIncluding": "1.02"
            },
            {
              "criteria": "cpe:2.3:a:cgi-rescue:kannibbs2000i:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA4A42C7-EDB8-4FBD-A504-C7C3BC1BBF89",
              "versionEndIncluding": "1.02"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}