Vulnerability Details CVE-2007-3567
MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allows remote attackers to bypass authentication requirements via HTTP POST requests.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2007-08/0052.html
- http://osvdb.org/42460
- http://securityreason.com/securityalert/2859
- http://www.securityfocus.com/archive/1/472756/100/0/threaded
- http://www.securityfocus.com/bid/24759
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35291
- http://archives.neohapsis.com/archives/bugtraq/2007-08/0052.html
- http://osvdb.org/42460
- http://securityreason.com/securityalert/2859
- http://www.securityfocus.com/archive/1/472756/100/0/threaded
- http://www.securityfocus.com/bid/24759
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35291
Products affected by CVE-2007-3567
-
cpe:2.3:a:mysqldumper:mysqldumper:1.21
-
cpe:2.3:a:mysqldumper:mysqldumper:1.22
-
cpe:2.3:a:mysqldumper:mysqldumper:1.23
-
cpe:2.3:a:mysqldumper:mysqldumper:typo3-extension_0.0.5