CVE-2007-4609 Information

Description

eyeOS uses predictable checksum values in the checknum parameter for access control which allows remote attackers to register many accounts via doCreateUser actions add many eyeBoard messages via addMsg actions and cause a denial of service or conduct certain unauthorized activities by guessing valid parameter values.

Reference

http://osvdb.org/45836 http://securityreason.com/securityalert/3081 http://www.securityfocus.com/archive/1/477866/100/0/threaded

Share on: