CVE-2009-1462

Published: Apr 28, 2009Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The Security Manager in razorCMS before 0.4 does not verify the permissions of every file owned by the apache user account, which is inconsistent with the documentation and allows local users to have an unspecified impact.

Affected (3)

Products: Razorcms: Razorcms

Razorcms

1 product

Razorcms

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Razorcms Razorcms	Up to 0.3
Razorcms Razorcms	Version 0.2
Razorcms Razorcms	Version 0.3 rc2

Related CWEs

CWE-264

References (10)

http://marc.info/?l=full-disclosure&m=123990481506680&w=2

Source: cve@mitre.org

Exploit

http://marc.info/?l=full-disclosure&m=123998062108561&w=2

Source: cve@mitre.org

Exploit

http://razorcms.co.uk/support/viewtopic.php?f=13&t=325

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/bid/34566

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/50358

Source: cve@mitre.org

http://marc.info/?l=full-disclosure&m=123990481506680&w=2