PT-2010-1579 · Httpdx · Httpdx

Publicado 2010-04-20 · Atualizado 2010-06-07 · CVE-2009-4770

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions httpdx versions 1.4 through 1.5

Description The issue is related to the FTP server component, which has a default password of pass123 for the moderator account. This makes it easier for remote attackers to obtain privileged access.

Recommendations For versions 1.4 through 1.5, change the default password of the moderator account to a strong and unique password to prevent unauthorized access.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-4770

Produtos afetados

Httpdx

Referências · 2

• 🔥 http://metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/ftp/httpdx_tolog_format.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4770 · Nota de Segurança