PT-2005-2531 · Geovision · Geovision Digital Video Surveillance System

Tirath Rai · Published 2005-05-14 · Updated 2017-07-11 · CVE-2005-1552

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GeoVision Digital Video Surveillance System versions 6.04, 6.1, 7.0

Description The issue allows remote attackers to gain sensitive information via a direct request to an image, even when a password and username are assigned, due to improper protection of the image when the system is set to create JPEG images.

Recommendations For GeoVision Digital Video Surveillance System versions 6.04, 6.1, 7.0, consider restricting access to the image creation feature until a proper fix is applied. As a temporary workaround, avoid using the JPEG image creation setting to minimize the risk of exploitation. Restrict direct requests to images to prevent unauthorized access.

Exploit

Fix

Related Identifiers

CVE-2005-1552

Affected Products

Geovision Digital Video Surveillance System

References · 8

• 🔥 http://securityfocus.com/bid/13571 · Exploit
• 🔥 http://esqo.com/research/advisories/2005/100505-1.txt · Exploit
• 🔥 https://exploit-db.com/exploits/25643 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1552 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20537 · Note
• http://osvdb.org/16340 · Note
• http://marc.info/?l=bugtraq&m=111574131105737&w=2 · Note
• http://secunia.com/advisories/15330 · Note