CVE-2007-0313 Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests.
HighCVSS 9.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gonicus system administration | <= 2.5.7 | No fix listed |
| debian/gosa(Debian:12) | < 2.5.8-1 | 2.5.8-1 |
| debian/gosa(Debian:13) | < 2.5.8-1 | 2.5.8-1 |
| debian/gosa(Debian:14) | < 2.5.8-1 | 2.5.8-1 |
References
- [gosa] 20070115 GOsa 2.5.8 released (security fixes!) mailing-list patch
- 32821 vdb-entry
- 23749 third-party-advisory vendor-advisory
- ADV-2007-0207 vdb-entry
- gosa-unspecified-data-manipulation(31516) vdb-entry
- Debian Security Tracker CVE-2007-0313 vendor-advisory