PT-2004-2601 · Emulive · Emulive Server4 Commerce Edition

James Bercegay · Published 2004-09-20 · Updated 2017-07-11 · CVE-2004-1695

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EmuLive Server4 Commerce Edition version 7560

Description The issue allows remote attackers to bypass authentication for the remote administration feature. This can be achieved by using a URL that contains an extra leading / (slash).

Recommendations For EmuLive Server4 Commerce Edition version 7560, consider restricting access to the remote administration feature until a patch is available. As a temporary workaround, avoid using URLs with extra leading slashes to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-1695

Affected Products

Emulive Server4 Commerce Edition

References · 7

• 🔥 https://exploit-db.com/exploits/24619 · Exploit
• http://gulftech.org/?node=research&article_id=00051-09202004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1695 · Security Note
• http://securityfocus.com/bid/11226 · Vendor Advisory
• http://secunia.com/advisories/12616 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=109577497718374&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17450 · Note