CVE-2009-0806

Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors.

CVSS v2.0 6.5 MEDIUM

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/advisories/34044	Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=663706
http://www.securityfocus.com/bid/33897	Patch
http://secunia.com/advisories/34044	Vendor Advisory
http://sourceforge.net/project/shownotes.php?release_id=663706
http://www.securityfocus.com/bid/33897	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:opengoo:opengoo::::::::
	cpe:2.3:a:opengoo:opengoo:0.1:alpha::::::
	cpe:2.3:a:opengoo:opengoo:0.2:alpha::::::
	cpe:2.3:a:opengoo:opengoo:0.3:alpha::::::
	cpe:2.3:a:opengoo:opengoo:0.4:alpha::::::
	cpe:2.3:a:opengoo:opengoo:0.5:beta::::::
	cpe:2.3:a:opengoo:opengoo:0.5.1:beta::::::
	cpe:2.3:a:opengoo:opengoo:0.5.2:beta::::::
	cpe:2.3:a:opengoo:opengoo:0.6.0:::::::*
	cpe:2.3:a:opengoo:opengoo:0.6.2:::::::*
	cpe:2.3:a:opengoo:opengoo:0.6.4:::::::*
	cpe:2.3:a:opengoo:opengoo:0.6.6:::::::*
	cpe:2.3:a:opengoo:opengoo:0.7:::::::*
	cpe:2.3:a:opengoo:opengoo:0.7.1:::::::*
	cpe:2.3:a:opengoo:opengoo:0.8:::::::*
	cpe:2.3:a:opengoo:opengoo:0.9:::::::*
	cpe:2.3:a:opengoo:opengoo:0.9:rc2::::::
	cpe:2.3:a:opengoo:opengoo:0.9.1:::::::*
	cpe:2.3:a:opengoo:opengoo:0.9.2:::::::*
	cpe:2.3:a:opengoo:opengoo:1.0:::::::*
	cpe:2.3:a:opengoo:opengoo:1.0:rc1::::::
	cpe:2.3:a:opengoo:opengoo:1.0:rc2::::::
	cpe:2.3:a:opengoo:opengoo:1.0:rc3::::::
	cpe:2.3:a:opengoo:opengoo:1.1:::::::*
	cpe:2.3:a:opengoo:opengoo:1.1:beta::::::
	cpe:2.3:a:opengoo:opengoo:1.1:rc1::::::
	cpe:2.3:a:opengoo:opengoo:1.1:rc2::::::
	cpe:2.3:a:opengoo:opengoo:1.2:beta::::::
	cpe:2.3:a:opengoo:opengoo:1.2:beta_2::::::
	cpe:2.3:a:opengoo:opengoo:1.2:rc1::::::
	cpe:2.3:a:opengoo:opengoo:1.2:rc2::::::

History

No history.

Information

Published : 2009-03-04 17:30

Updated : 2025-04-09 00:30

NVD link : CVE-2009-0806

Mitre link : CVE-2009-0806

CVE.ORG link : CVE-2009-0806

JSON object : View

Products Affected

opengoo

opengoo

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2009-0806", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2009-03-04T17:30:02.530", "references": [{"url": "http://secunia.com/advisories/34044", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=663706", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/33897", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/34044", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=663706", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/33897", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in OpenGoo before 1.2.1 allows remote authenticated users to modify their own permissions via unknown attack vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en OpenGoo anterior a v1.2.1, permite a usuarios autenticados en remoto modificar sus propios permisos a trav\u00e9s de vectores de ataque desconocidos."}], "lastModified": "2025-04-09T00:30:58.490", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:opengoo:opengoo:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DADAA5EA-129C-4D0D-8CC7-BCAEF89D3D0C", "versionEndIncluding": "1.2"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.1:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2B9EE25-A6BF-4302-87FA-323FEFF91117"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.2:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BA125B0-E18B-4D42-AFC6-B77EC15F90A7"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.3:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "30F9527B-092A-43F5-8D0E-A4F992BDEB0F"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.4:alpha:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEC65EA3-425F-4351-9038-0923C5EFEFE0"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.5:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09A10638-8F6E-4CEB-9521-D5D8CEFE9BFF"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.5.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA8AEB76-5E1A-44F7-BB4E-6D9FC076B70C"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.5.2:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8652824E-FE62-42CC-A30B-FA92BBAA3840"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A366E561-630C-4C23-93B7-DA3A926FA474"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41036BEC-ECBD-4966-974F-3D99245D2325"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31075C8F-BFCD-49AC-81F7-EEB5B04964D7"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C038758-7C32-4C24-8D6D-BF52EEF3209F"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2E775DC5-909E-4F3E-97D6-3894FF2F3CDA"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "466AAA19-4C1F-44D5-934A-DE853254E13D"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17857BBF-BB51-41D0-A5FD-7011108A1BB8"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29540269-2D98-4AA0-AC7A-F00B3CA67F93"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.9:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E325F5A3-6180-45D6-B4B6-125FE1597EE6"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32B1BD62-0467-4E14-AC91-E4DAADBC3279"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:0.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71D567F5-6923-4C82-BCBB-5FFB15697137"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC271E48-FC40-4A84-8660-12572DEFE02A"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFD757BE-4DA1-46B0-A899-31CDB1B38D0B"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA77B2A5-2FDF-4154-A97E-AE10D54BAF37"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C2CABFDE-DD6A-47A3-A485-CC6204B6D037"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DC6587D-86F4-441A-B6CA-9603956C9B74"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.1:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1036853A-BDE7-482A-895C-ACD20A75AE5B"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.1:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BD7A6292-1DAB-4706-BBB0-F37F171ADEC4"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.1:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3DDCBB7-E133-4D46-965F-B5C335DFA8B6"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.2:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E02268FF-33B7-41C4-9233-D994C730FFF3"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.2:beta_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99B3FC64-BB6A-4E06-9C88-15EA2D044745"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.2:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBF5947A-F624-4544-88E0-2E2D3C72973B"}, {"criteria": "cpe:2.3:a:opengoo:opengoo:1.2:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D124D00-EB61-493A-85F3-9B73F8CCAD87"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}