CVE-2008-7101: Medium severity DotNetNuke DotNetNuke vulnerability

Published Aug 27, 2009

Updated

Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information (portal number) by accessing the install wizard page via unknown vectors.

Affected Software

32 affected components

DotNetNuke DotNetNuke=4.8.2

DotNetNuke DotNetNuke=4.8.1

DotNetNuke DotNetNuke=4.8.3

DotNetNuke DotNetNuke=4.5.2

DotNetNuke DotNetNuke=4.6.2

DotNetNuke DotNetNuke=4.8.4

DotNetNuke DotNetNuke=5.0

DotNetNuke DotNetNuke=4.3.5

DotNetNuke DotNetNuke=4.5.4

DotNetNuke DotNetNuke=4.0

DotNetNuke DotNetNuke=4.4.1

DotNetNuke DotNetNuke=4.6.0

DotNetNuke DotNetNuke=4.7.0

DotNetNuke DotNetNuke=4.8.0

DotNetNuke DotNetNuke=4.5.5

DotNetNuke DotNetNuke=4.6.1

dnnsoftware Dotnetnuke=4.0

dnnsoftware Dotnetnuke=4.3.5

dnnsoftware Dotnetnuke=4.4.1

dnnsoftware Dotnetnuke=4.5.2

dnnsoftware Dotnetnuke=4.5.4

dnnsoftware Dotnetnuke=4.5.5

dnnsoftware Dotnetnuke=4.6.0

dnnsoftware Dotnetnuke=4.6.1

dnnsoftware Dotnetnuke=4.6.2

dnnsoftware Dotnetnuke=4.7.0

dnnsoftware Dotnetnuke=4.8.0

dnnsoftware Dotnetnuke=4.8.1

dnnsoftware Dotnetnuke=4.8.2

dnnsoftware Dotnetnuke=4.8.3

dnnsoftware Dotnetnuke=4.8.4

dnnsoftware Dotnetnuke=5.0

Remediation

Patch Available

http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno22/tabid/1175/Default.aspx

Event History

Aug 27, 2009

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:30 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-7101?

CVE-2008-7101 is categorized as a moderate severity vulnerability that allows remote attackers to gather sensitive information.

How do I fix CVE-2008-7101?

To mitigate CVE-2008-7101, it is recommended to upgrade to a version of DotNetNuke that is not affected, specifically version 5.0 or higher.

What versions of DotNetNuke are affected by CVE-2008-7101?

CVE-2008-7101 affects DotNetNuke versions 4.0 through 4.8.4 and 5.0.

What type of information can be obtained by exploiting CVE-2008-7101?

Exploitation of CVE-2008-7101 may allow attackers to obtain sensitive information such as the portal number.

Is there a known exploit for CVE-2008-7101?

While CVE-2008-7101 has been reported, there are no widely known public exploits specifically targeting this vulnerability.