Lucene search

MitreCVE-2003-1160

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2003-1160

2005-05-1004:00:00

mitre

web.nvd.nist.gov

cve

flexwatch

network video server

authentication bypass

administrative privileges

http request

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.027

Percentile

90.6%

JSON

FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).

Affected configurations

Nvd

Node

seyeonflexwatch_network_video_serverMatch2.2

seyeonflexwatch_network_video_serverMatchmodel_132

VendorProductVersionCPE
seyeonflexwatch_network_video_server2.2cpe:2.3:a:seyeon:flexwatch_network_video_server:2.2:*:*:*:*:*:*:*
seyeonflexwatch_network_video_servermodel_132cpe:2.3:a:seyeon:flexwatch_network_video_server:model_132:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
seyeon	flexwatch_network_video_server	2.2	cpe:2.3:a:seyeon:flexwatch_network_video_server:2.2:::::::*
seyeon	flexwatch_network_video_server	model_132	cpe:2.3:a:seyeon:flexwatch_network_video_server:model_132:::::::*

References

packetstormsecurity.nl/0310-exploits/FlexWATCH.txt

secunia.com/advisories/10132

securitytracker.com/id?1008049

www.osvdb.org/2842

www.securityfocus.com/bid/8942

exchange.xforce.ibmcloud.com/vulnerabilities/13567

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.027

Percentile

90.6%

JSON

Related for CVE-2003-1160