PT-2003-2112 · Unknown · Flexwatch Network Video Server

Publicado 2003-10-30 · Atualizado 2017-07-11 · CVE-2003-1160

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FlexWATCH Network video server version 132

Description The issue allows remote attackers to bypass authentication and gain administrative privileges. This can be achieved by sending an HTTP request to the "aindex.htm" endpoint that contains double leading slashes (//).

Recommendations For FlexWATCH Network video server version 132, consider restricting access to the "aindex.htm" endpoint until a patch is available. As a temporary workaround, avoid using double leading slashes (//) in HTTP requests to prevent potential exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2003-1160

Produtos afetados

Flexwatch Network Video Server

Referências · 8

• 🔥 http://securitytracker.com/id?1008049 · Exploit
• 🔥 https://exploit-db.com/exploits/23317 · Exploit
• 🔥 http://packetstormsecurity.nl/0310-exploits/FlexWATCH.txt · Exploit
• 🔥 http://securityfocus.com/bid/8942 · Exploit
• 🔥 http://secunia.com/advisories/10132 · Exploit
• http://osvdb.org/2842 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1160 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13567 · Nota