CVE-2009-1596 - Vulnerability Details - OpenCVE

Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Igniterealtime	Openfire

Configuration 1 [-]

cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://secunia.com/advisories/34984
http://www.igniterealtime.org/community/message/190280
http://www.igniterealtime.org/issues/browse/JM-1532
http://www.osvdb.org/54189
http://www.securityfocus.com/bid/34804
https://exchange.xforce.ibmcloud.com/vulnerabilities/50291

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2009-05-11T14:02:00

Updated: 2024-08-07T05:20:34.723Z

Reserved: 2009-05-11T00:00:00

Link: CVE-2009-1596

Vulnrichment

No data.

NVD

Status : Modified

Published: 2009-05-11T14:30:00.343

Modified: 2024-11-21T01:02:52.003

Link: CVE-2009-1596

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2009-04-15T00:00:00", "descriptions": [{"lang": "en", "value": "Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://www.igniterealtime.org/community/message/190280"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.igniterealtime.org/issues/browse/JM-1532"}, {"name": "34984", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/34984"}, {"name": "openfire-nopassword-security-bypass(50291)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50291"}, {"name": "34804", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/34804"}, {"name": "54189", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/54189"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-1596", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://www.igniterealtime.org/community/message/190280", "refsource": "CONFIRM", "url": "http://www.igniterealtime.org/community/message/190280"}, {"name": "http://www.igniterealtime.org/issues/browse/JM-1532", "refsource": "CONFIRM", "url": "http://www.igniterealtime.org/issues/browse/JM-1532"}, {"name": "34984", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/34984"}, {"name": "openfire-nopassword-security-bypass(50291)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50291"}, {"name": "34804", "refsource": "BID", "url": "http://www.securityfocus.com/bid/34804"}, {"name": "54189", "refsource": "OSVDB", "url": "http://www.osvdb.org/54189"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T05:20:34.723Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.igniterealtime.org/community/message/190280"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.igniterealtime.org/issues/browse/JM-1532"}, {"name": "34984", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/34984"}, {"name": "openfire-nopassword-security-bypass(50291)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50291"}, {"name": "34804", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/34804"}, {"name": "54189", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/54189"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-1596", "datePublished": "2009-05-11T14:02:00", "dateReserved": "2009-05-11T00:00:00", "dateUpdated": "2024-08-07T05:20:34.723Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:igniterealtime:openfire:*:*:*:*:*:*:*:*", "matchCriteriaId": "65A725C1-F775-4A44-A855-4FB8A8BE77A1", "versionEndExcluding": "3.6.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet."}, {"lang": "es", "value": "Ignite Realtime Openfire antes de v3.6.5 no implementa correctamente la propiedad de configuraci\u00f3n de la consola register.password (alias canChangePassword), lo que permite eludir la pol\u00edtica de seguridad a usuarios remotos autenticados, as\u00ed como cambiar sus propias contrase\u00f1as a trav\u00e9s de un paquete passwd_change IQ."}], "id": "CVE-2009-1596", "lastModified": "2024-11-21T01:02:52.003", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2009-05-11T14:30:00.343", "references": [{"source": "cve@mitre.org", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://secunia.com/advisories/34984"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "http://www.igniterealtime.org/community/message/190280"}, {"source": "cve@mitre.org", "tags": ["Patch", "Permissions Required", "Vendor Advisory"], "url": "http://www.igniterealtime.org/issues/browse/JM-1532"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://www.osvdb.org/54189"}, {"source": "cve@mitre.org", "tags": ["Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/34804"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50291"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Vendor Advisory"], "url": "http://secunia.com/advisories/34984"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Patch", "Vendor Advisory"], "url": "http://www.igniterealtime.org/community/message/190280"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Permissions Required", "Vendor Advisory"], "url": "http://www.igniterealtime.org/issues/browse/JM-1532"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.osvdb.org/54189"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link", "Exploit", "Patch", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/34804"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50291"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}