CVE-2007-6130

gnump3d 2.9final - Auth Bypass

Title source: llm

Description

gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restrictions.

References (7)

[Issue Tracking] https://bugs.gentoo.org/show_bug.cgi?id=193132

[Various Sources] http://www.gnu.org/software/gnump3d/ChangeLog

[Vendor Advisory] http://www.novell.com/linux/security/advisories/2007_25_sr.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/26618

[Third Party Advisory] http://secunia.com/advisories/27848

[Third Party Advisory] http://secunia.com/advisories/27965

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/4039

Scores

EPSS 0.0037

EPSS Percentile 58.6%

Classification

CWE

CWE-287

Status draft

Affected Products (1)

gnu/gnump3d

Timeline

Published Nov 26, 2007

Tracked Since Feb 18, 2026