CVE-2009-2025: High severity Dutchmonkey Dm Filemanager vulnerability
Published Jun 9, 2009
·Updated
admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the (1) USER, (2) GROUPID, (3) GROUP, and (4) USERID cookies to certain values.
Affected Software
1 affected component
Dutchmonkey Dm Filemanager=3.9.2
Event History
Jun 9, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2025?
CVE-2009-2025 is classified as a critical vulnerability due to its capability to allow remote attackers to gain administrative access.
2
How do I fix CVE-2009-2025?
To address CVE-2009-2025, update DM FileManager to a version later than 3.9.2 that remediates this authentication bypass vulnerability.
3
Which software is affected by CVE-2009-2025?
CVE-2009-2025 specifically affects DM FileManager version 3.9.2.
4
Can CVE-2009-2025 be exploited remotely?
Yes, CVE-2009-2025 can be exploited remotely by attackers to bypass authentication.
5
What type of vulnerability is CVE-2009-2025?
CVE-2009-2025 is an authentication bypass vulnerability allowing unauthorized access to administrative functions.