PT-2003-2112 · Unknown · Flexwatch Network Video Server

Published 2003-10-30 · Updated 2017-07-11 · CVE-2003-1160

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions FlexWATCH Network video server version 132

Description The issue allows remote attackers to bypass authentication and gain administrative privileges. This can be achieved by sending an HTTP request to the "aindex.htm" endpoint that contains double leading slashes (//).

Recommendations For FlexWATCH Network video server version 132, consider restricting access to the "aindex.htm" endpoint until a patch is available. As a temporary workaround, avoid using double leading slashes (//) in HTTP requests to prevent potential exploitation.

Exploit

Fix

Related Identifiers

CVE-2003-1160

Affected Products

Flexwatch Network Video Server

References · 8

• 🔥 http://securitytracker.com/id?1008049 · Exploit
• 🔥 https://exploit-db.com/exploits/23317 · Exploit
• 🔥 http://packetstormsecurity.nl/0310-exploits/FlexWATCH.txt · Exploit
• 🔥 http://securityfocus.com/bid/8942 · Exploit
• 🔥 http://secunia.com/advisories/10132 · Exploit
• http://osvdb.org/2842 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1160 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13567 · Note