PT-2003-2420 · Netbus · Netbus

Skyz · Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1475

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Netbus versions 1.5 through 1.7

Description The issue allows more than one client to connect at the same time, but only the first connection is prompted for authentication. This enables remote attackers to gain access without proper authentication.

Recommendations For Netbus versions 1.5 through 1.7, consider restricting multiple client connections to prevent unauthorized access until a proper fix is available. As a temporary workaround, limit the number of simultaneous connections to one to minimize the risk of exploitation.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2003-1475

Produtos afetados

Netbus

Referências · 5

• 🔥 http://securityfocus.com/archive/1/320980 · Exploit
• 🔥 http://securityreason.com/securityalert/3289 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11982 · Nota
• http://securityfocus.com/bid/7538 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1475 · Nota de Segurança