{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-04-13T00:00:00", "descriptions": [{"lang": "en", "value": "MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "mybb-uid-values-dos(64513)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64513"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/"}, {"name": "[oss-security] 20101008 CVE request: mybb before 1.4.11 and before 1.4.12", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2010/10/08/7"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://dev.mybboard.net/projects/mybb/repository/revisions/4856"}, {"name": "[oss-security] 20101011 Re: CVE request: mybb before 1.4.11 and before 1.4.12", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2010/10/11/8"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://dev.mybboard.net/issues/722"}, {"name": "[oss-security] 20101206 Re: CVE request: mybb before 1.4.11 and before 1.4.12", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2010/12/06/2"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-4629", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "mybb-uid-values-dos(64513)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64513"}, {"name": "http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/", "refsource": "CONFIRM", "url": "http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/"}, {"name": "[oss-security] 20101008 CVE request: mybb before 1.4.11 and before 1.4.12", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2010/10/08/7"}, {"name": "http://dev.mybboard.net/projects/mybb/repository/revisions/4856", "refsource": "CONFIRM", "url": "http://dev.mybboard.net/projects/mybb/repository/revisions/4856"}, {"name": "[oss-security] 20101011 Re: CVE request: mybb before 1.4.11 and before 1.4.12", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2010/10/11/8"}, {"name": "http://dev.mybboard.net/issues/722", "refsource": "CONFIRM", "url": "http://dev.mybboard.net/issues/722"}, {"name": "[oss-security] 20101206 Re: CVE request: mybb before 1.4.11 and before 1.4.12", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2010/12/06/2"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-4629", "datePublished": "2010-12-30T20:00:00", "dateReserved": "2010-12-30T00:00:00", "dateUpdated": "2017-08-16T14:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*", "matchCriteriaId": "AA9326ED-4299-46B9-B654-0BC7C5282903", "versionEndIncluding": "1.4.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.00:*:*:*:*:*:*:*", "matchCriteriaId": "BD61D970-9363-4A75-A8DB-D0EBA2CF0D53", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.01:*:*:*:*:*:*:*", "matchCriteriaId": "990E206E-5E2C-4A68-9FDF-CD47F7524054", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "CF143B59-5C78-4BF6-9368-5BCF427B4753", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "B16F6F07-F5A9-47BF-88ED-25F068B68CF6", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "A8A46A48-1361-4DD3-B97D-4C4FC776D68A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "337D89AE-1B7A-4101-B1F7-DFEDF2369385", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "BE08AF25-EDB1-4DA1-B431-F0692858AAAA", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "BF24E7BA-3144-4DBA-9613-A44FBE0822F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "029430A5-85BD-4258-B58D-F3DCBC625E5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.1.7:*:*:*:*:*:*:*", "matchCriteriaId": "4183DB7F-FAB3-4D90-AD87-31CA4150CFDD", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.1.8:*:*:*:*:*:*:*", "matchCriteriaId": "3E2B90B8-DC02-4C79-BD69-DEF79945C418", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.02:*:*:*:*:*:*:*", "matchCriteriaId": "C5C52215-D236-4D1A-9E30-14B9676FB68A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2:*:*:*:*:*:*:*", "matchCriteriaId": "4E080342-93CD-4E74-AE60-5858738CE7F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "B48D2EDF-86C2-475C-9476-E5A2D586CA0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "B6725373-C229-4B57-BB1E-AF178E19DEB0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "36E4C84A-21D5-4C9A-85F8-45C9657CE6F5", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "C7E55085-E3E3-4BB8-A680-19A28D7E88F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "AB01A9AA-AE70-46DF-815A-05D1101EE706", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "98AFD77B-A046-4AB9-B6F4-FFFF66C63C68", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "AA00D38E-AAF6-4F66-9203-5C074FC61F30", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "137A8CED-BE82-462F-B83C-15F535961E74", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "D179FDB6-9B1D-438C-B512-9A5C4F869A4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "B3E72A13-6B4A-4C7F-B8D9-A2D35E074B67", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.10:*:*:*:*:*:*:*", "matchCriteriaId": "3A2D344F-4671-4194-A553-A5773B5DF3B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.11:*:*:*:*:*:*:*", "matchCriteriaId": "245760C8-DC10-47F1-843A-461AE2F3DF61", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.12:*:*:*:*:*:*:*", "matchCriteriaId": "A055E6BF-3CAC-4C74-8E37-A89E3E0F8559", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.2.13:*:*:*:*:*:*:*", "matchCriteriaId": "1121A071-3709-4B2B-ADF4-EDC560F73E0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.03:*:*:*:*:*:*:*", "matchCriteriaId": "F6ABDEE8-D463-47CA-998D-33472F3382F3", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.04:*:*:*:*:*:*:*", "matchCriteriaId": "DE44965F-F968-4CD2-9F21-1E1A92F5F7F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "3FC8864E-161F-408E-93D6-693A9238C494", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "9503D6C2-DCBC-4720-BE29-34913950407E", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "0F6FC2B1-45DF-439E-8BAE-A15A08E7D9F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "B46B7E13-51F8-4950-BBB4-A03B8E5B4750", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "A00F1254-67DE-436D-AB83-1C55639BDBD2", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "AC2FDC2B-2CB4-433F-9290-3A6BE0A929B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:mybb:mybb:1.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "1FF9452B-CF4B-45F0-8487-23D9CCBB1A4A", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php."}, {"lang": "es", "value": "MyBB (MyBulletinBoard) en versiones anteriores a la 1.4.12 no restringe apropiadamente los valores uid para peticiones de uni\u00f3n de grupo; lo que permite, a atacantes remotos, provocar una denegaci\u00f3n de servicio (consumo de todos los recursos) usando un acceso de invitado para enviar formularios de peticiones de uni\u00f3n para grupos moderados. Vulnerabilidad relacionada con usercp.php y managegroup.php."}], "id": "CVE-2010-4629", "lastModified": "2017-08-17T01:33:16.353", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2010-12-30T21:00:02.690", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/"}, {"source": "cve@mitre.org", "url": "http://dev.mybboard.net/issues/722"}, {"source": "cve@mitre.org", "url": "http://dev.mybboard.net/projects/mybb/repository/revisions/4856"}, {"source": "cve@mitre.org", "url": "http://openwall.com/lists/oss-security/2010/10/08/7"}, {"source": "cve@mitre.org", "url": "http://openwall.com/lists/oss-security/2010/10/11/8"}, {"source": "cve@mitre.org", "url": "http://openwall.com/lists/oss-security/2010/12/06/2"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64513"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}