Lucene search

MitreCVE-2004-0334

HistoryNov 23, 2004 - 5:00 a.m.

CVE-2004-0334

2004-11-2305:00:00

mitre

web.nvd.nist.gov

innomedia

videophone

remote attackers

bypass

basic authorization

http request

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

72.0%

JSON

InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videophone_sysctrl.asp that contains a trailing / (slash). NOTE: the original report mentioned AXIS 2100 Network Camera, but this was likely a cut-and-paste error.

Affected configurations

Nvd

Node

innomediainnomedia_videophoneMatchau75200xvi04010x

VendorProductVersionCPE
innomediainnomedia_videophoneau75200xvi04010xcpe:2.3:h:innomedia:innomedia_videophone:au75200xvi04010x:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
innomedia	innomedia_videophone	au75200xvi04010x	cpe:2.3:h:innomedia:innomedia_videophone:au75200xvi04010x:::::::*

References

marc.info/?l=bugtraq&m=107799556111784&w=2

securitytracker.com/alerts/2004/Mar/1009522.html

www.osvdb.org/4809

exchange.xforce.ibmcloud.com/vulnerabilities/15636

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.004

Percentile

72.0%

JSON

Related for CVE-2004-0334