Unrated severityNVD Advisory· Published Aug 18, 2007· Updated Jun 16, 2026
CVE-2007-4419
CVE-2007-4419
Description
Admin.php in Olate Download (od) 3.4.1 uses an MD5 hash of the admin username, user id, and group id, to compose the OD3_AutoLogin authentication cookie, which makes it easier for remote attackers to guess the cookie and access the Admin area.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:olate:olatedownload:3.4.1:*:*:*:*:*:*:*
- Range: 3.4.1
Patches
Vulnerability mechanics
References
11- www.securityfocus.com/bid/25343nvdExploit
- myimei.com/security/2007-08-16/olate-download-341adminphpauthentication-bypassing.htmlnvd
- osvdb.org/39714nvd
- secunia.com/advisories/26533nvd
- securityreason.com/securityalert/3028nvd
- sourceforge.net/forum/forum.phpnvd
- sourceforge.net/project/shownotes.phpnvd
- sourceforge.net/project/shownotes.phpnvd
- www.securityfocus.com/archive/1/476760/100/0/threadednvd
- www.securityfocus.com/archive/1/477223/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/36088nvd
News mentions
0No linked articles in our index yet.