ByteOS Network

Vulnerability Details :

CVE-2004-1968

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-10 May, 2005 | 04:00

Updated At-08 Aug, 2024 | 01:07

The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:10 May, 2005 | 04:00

Updated At:08 Aug, 2024 | 01:07

▼CVE Numbering Authority (CNA)

The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/15970	vdb-entry x_refsource_XF
http://www.securityfocus.com/bid/10217	vdb-entry x_refsource_BID
http://marc.info/?l=bugtraq&m=108301983206107&w=2	mailing-list x_refsource_BUGTRAQ
http://secunia.com/advisories/11481	third-party-advisory x_refsource_SECUNIA
http://securitytracker.com/id?1009935	vdb-entry x_refsource_SECTRACK

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/15970

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://www.securityfocus.com/bid/10217

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://marc.info/?l=bugtraq&m=108301983206107&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

Hyperlink: http://secunia.com/advisories/11481

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://securitytracker.com/id?1009935

Resource:

vdb-entry

x_refsource_SECTRACK

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/15970	vdb-entry x_refsource_XF x_transferred
http://www.securityfocus.com/bid/10217	vdb-entry x_refsource_BID x_transferred
http://marc.info/?l=bugtraq&m=108301983206107&w=2	mailing-list x_refsource_BUGTRAQ x_transferred
http://secunia.com/advisories/11481	third-party-advisory x_refsource_SECUNIA x_transferred
http://securitytracker.com/id?1009935	vdb-entry x_refsource_SECTRACK x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/15970

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://www.securityfocus.com/bid/10217

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://marc.info/?l=bugtraq&m=108301983206107&w=2

Resource:

mailing-list

x_refsource_BUGTRAQ

x_transferred

Hyperlink: http://secunia.com/advisories/11481

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://securitytracker.com/id?1009935

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:26 Apr, 2004 | 04:00

Updated At:03 Apr, 2025 | 01:03

The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

openbb>>openbb>>1.0_.0_beta1

cpe:2.3:a:openbb:openbb:1.0_.0_beta1:*:*:*:*:*:*:*

openbb>>openbb>>1.0_.0_rc1

cpe:2.3:a:openbb:openbb:1.0_.0_rc1:*:*:*:*:*:*:*

openbb>>openbb>>1.0_.0_rc2

cpe:2.3:a:openbb:openbb:1.0_.0_rc2:*:*:*:*:*:*:*

openbb>>openbb>>1.0_.0_rc3

cpe:2.3:a:openbb:openbb:1.0_.0_rc3:*:*:*:*:*:*:*

openbb>>openbb>>1.0_.5

cpe:2.3:a:openbb:openbb:1.0_.5:*:*:*:*:*:*:*

openbb>>openbb>>1.0_.6

cpe:2.3:a:openbb:openbb:1.0_.6:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://marc.info/?l=bugtraq&m=108301983206107&w=2	cve@mitre.org	N/A
http://secunia.com/advisories/11481	cve@mitre.org	Exploit Vendor Advisory
http://securitytracker.com/id?1009935	cve@mitre.org	Vendor Advisory
http://www.securityfocus.com/bid/10217	cve@mitre.org	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15970	cve@mitre.org	N/A
http://marc.info/?l=bugtraq&m=108301983206107&w=2	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/11481	af854a3a-2127-422b-91ae-364da2661108	Exploit Vendor Advisory
http://securitytracker.com/id?1009935	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/10217	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15970	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://marc.info/?l=bugtraq&m=108301983206107&w=2

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/11481

Source: cve@mitre.org

Resource:

Exploit

Vendor Advisory

Hyperlink: http://securitytracker.com/id?1009935

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/10217

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/15970

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://marc.info/?l=bugtraq&m=108301983206107&w=2