PT-2005-2531 · Geovision · Geovision Digital Video Surveillance System

Tirath Rai · Publicado 2005-05-14 · Atualizado 2017-07-11 · CVE-2005-1552

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GeoVision Digital Video Surveillance System versions 6.04, 6.1, 7.0

Description The issue allows remote attackers to gain sensitive information via a direct request to an image, even when a password and username are assigned, due to improper protection of the image when the system is set to create JPEG images.

Recommendations For GeoVision Digital Video Surveillance System versions 6.04, 6.1, 7.0, consider restricting access to the image creation feature until a proper fix is applied. As a temporary workaround, avoid using the JPEG image creation setting to minimize the risk of exploitation. Restrict direct requests to images to prevent unauthorized access.

Exploit

Correção

Identificadores relacionados

CVE-2005-1552

Produtos afetados

Geovision Digital Video Surveillance System

Referências · 8

• 🔥 http://securityfocus.com/bid/13571 · Exploit
• 🔥 http://esqo.com/research/advisories/2005/100505-1.txt · Exploit
• 🔥 https://exploit-db.com/exploits/25643 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20537 · Nota
• http://osvdb.org/16340 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1552 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111574131105737&w=2 · Nota
• http://secunia.com/advisories/15330 · Nota