PT-2010-1579 · Httpdx · Httpdx

Published 2010-04-20 · Updated 2010-06-07 · CVE-2009-4770

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions httpdx versions 1.4 through 1.5

Description The issue is related to the FTP server component, which has a default password of pass123 for the moderator account. This makes it easier for remote attackers to obtain privileged access.

Recommendations For versions 1.4 through 1.5, change the default password of the moderator account to a strong and unique password to prevent unauthorized access.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-4770

Affected Products

Httpdx

References · 2

• 🔥 http://metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/ftp/httpdx_tolog_format.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4770 · Security Note