TYPO3 nepa-design.de Spam Protection Extension Unspecified Setting Manipulation Vulnerability

Bugtraq ID:	29833
Class:	Unknown
CVE:	CVE-2008-6690
Remote:	Yes
Local:	No
Published:	Jun 19 2008 12:00AM
Updated:	Apr 24 2009 10:56PM
Credit:	Patrick Broens
Vulnerable:	Typo3 nepa-design.de Spam Protection 1.0.3
Not Vulnerable:

TYPO3 nepa-design.de Spam Protection Extension Unspecified Setting Manipulation Vulnerability

TYPO3 nepa-design.de Spam Protection extension is prone to a vulnerability that results in the manipulation of external settings.

Attackers can leverage the issue to make unauthorized changes that may aid in further attacks.

nepa-design.de Spam Protection 0.1.3 is vulnerable; prior versions may also be affected.

TYPO3 nepa-design.de Spam Protection Extension Unspecified Setting Manipulation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TYPO3 nepa-design.de Spam Protection Extension Unspecified Setting Manipulation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TYPO3 nepa-design.de Spam Protection Extension Unspecified Setting Manipulation Vulnerability

References:

• Synnefoims Homepage (synnefoims)
  
• TYPO3 Collective Security Bulletin TYPO3-20080619-1: Several vulnerabilities in (TYPO3)