CVE-2008-2003

BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to (1) cause a…

published April 28, 2008

CVSS
—
EPSS
3%
Percentile
86.5
In the wild
Unconfirmed
What it is

BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to (1) cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via (2) badblue.exe and (3) dyndns.exe. NOTE: this can be leveraged for arbitrary remote code execution in conjunction with CVE-2007-6378.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02837 · 86.5th percentile
Published
2008-04-28T18:21Z
EPSS history
Timeline
  • 28 APR 18:21Z
    BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to (1) cause a…
    cvelistv5