PT-2005-1768 · Py · Active Webcam Webserver

Published 2005-03-13 · Updated 2017-07-11 · CVE-2005-0733

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PY Software Active Webcam WebServer version 5.5

Description The issue allows remote attackers to determine the existence of files via an HTTP request with a full pathname. This is possible because the server produces different messages whether the file exists or not.

Recommendations For version 5.5, consider restricting access to the web server or implementing additional security measures to prevent unauthorized file existence checks. As a temporary workaround, restrict access to sensitive files and directories to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-0733

Affected Products

Active Webcam Webserver

References · 5

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html · Exploit
• 🔥 http://secunia.com/advisories/14553 · Exploit
• 🔥 http://secway.org/advisory/ad20050104.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0733 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19654 · Note