PT-2003-2331 · Axis · Axis 2400 Video Server

Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1386

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions AXIS 2400 Video Server versions 2.00 through 2.33

Description The issue allows remote attackers to obtain sensitive information via an HTTP request to "/support/messages", which displays the server's /var/log/messages file.

Recommendations For versions 2.00 through 2.33, as a temporary workaround, consider restricting access to the "/support/messages" endpoint until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2003-1386

Produtos afetados

Axis 2400 Video Server

Referências · 7

• 🔥 https://exploit-db.com/exploits/22296 · Exploit
• http://websec.org/adv/axis2400.txt.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1386 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11440 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2003-03/0370.html · Nota
• http://securityfocus.com/bid/6980 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2003-02/0377.html · Nota