PT-2004-2601 · Emulive · Emulive Server4 Commerce Edition

James Bercegay · Publicado 2004-09-20 · Atualizado 2017-07-11 · CVE-2004-1695

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EmuLive Server4 Commerce Edition version 7560

Description The issue allows remote attackers to bypass authentication for the remote administration feature. This can be achieved by using a URL that contains an extra leading / (slash).

Recommendations For EmuLive Server4 Commerce Edition version 7560, consider restricting access to the remote administration feature until a patch is available. As a temporary workaround, avoid using URLs with extra leading slashes to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-1695

Produtos afetados

Emulive Server4 Commerce Edition

Referências · 7

• 🔥 https://exploit-db.com/exploits/24619 · Exploit
• http://gulftech.org/?node=research&article_id=00051-09202004 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1695 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=109577497718374&w=2 · Nota
• http://securityfocus.com/bid/11226 · Aviso do Fabricante
• http://secunia.com/advisories/12616 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17450 · Nota