CVE-2008-7138

EUVD-2008-7097
The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
eye.fieye-fi_manager
1.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/42719
http://secunia.com/advisories/29221
http://www.informit.com/articles/article.aspx?p=1177111&seqNum=2
http://www.securityfocus.com/archive/1/489045/100/0/threaded
http://www.securityfocus.com/bid/28085
http://osvdb.org/42719
http://secunia.com/advisories/29221
http://www.informit.com/articles/article.aspx?p=1177111&seqNum=2
http://www.securityfocus.com/archive/1/489045/100/0/threaded
http://www.securityfocus.com/bid/28085