{"id": "CVE-2005-0733", "bulletinFamily": "NVD", "title": "CVE-2005-0733", "description": "PY Software Active Webcam WebServer (webcam.exe) 5.5 allows remote attackers to determine the existence of files via an HTTP request with a full pathname, which produces different messages whether the file exists or not.", "published": "2005-05-02T04:00:00", "modified": "2017-07-11T01:32:00", "cvss": {"score": 5.0, "vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-0733", "reporter": "cve@mitre.org", "references": ["http://secway.org/advisory/ad20050104.txt", "http://archives.neohapsis.com/archives/fulldisclosure/2005-03/0216.html", "https://exchange.xforce.ibmcloud.com/vulnerabilities/19654", "http://secunia.com/advisories/14553"], "cvelist": ["CVE-2005-0733"], "type": "cve", "lastseen": "2019-05-29T18:08:13", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "277eccf832a096fad7e9d47024183daa"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "ac91730155a9c61db9ffd63ddc3eedce"}, {"key": "cpe23", "hash": "c62ccd4e226a0749e7307351be37a04e"}, {"key": "cvelist", "hash": "7c218b93698ed77d1367a1d6cb3edd41"}, {"key": "cvss", "hash": "a89198c45ce87f7ec9735a085150b708"}, {"key": "cvss2", "hash": "f30109dfdbfbf783c0b61792a6b2c20a"}, {"key": "cvss3", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cwe", "hash": "78a7a5cbaf09985c14389298e454e7db"}, {"key": "description", "hash": "c17891f166aeeb3aba5eca6470982abc"}, {"key": "href", "hash": "9bdeb0f2c65f6d758ccf6c5595894f1a"}, {"key": "modified", "hash": "83de1fd34ae7439525b2c7f78002fac2"}, {"key": "published", "hash": "c13cd72b1fb79a3190ca4c56e280fabc"}, {"key": "references", "hash": "b2c70d5fc8978e071bda686f42e3eff2"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "1187cd1504cf91fa7c1e0ba096bac13b"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "f1b08ed68cdfa55cf5ed0bfa90dce2dc41a7e497500a14287f100f1a5fd91d95", "viewCount": 0, "enchantments": {"dependencies": {"references": [{"type": "osvdb", "idList": ["OSVDB:14641"]}, {"type": "nessus", "idList": ["ACTIVEWEBCAM_MULTIPLE_VULNS.NASL"]}], "modified": "2019-05-29T18:08:13"}, "score": {"value": 5.3, "vector": "NONE", "modified": "2019-05-29T18:08:13"}, "vulnersScore": 5.3}, "objectVersion": "1.3", "cpe": ["cpe:/a:py_software:active_webcam:5.5"], "affectedSoftware": [{"name": "py_software active_webcam", "operator": "eq", "version": "5.5"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:a:py_software:active_webcam:5.5:*:*:*:*:*:*:*"], "cwe": ["NVD-CWE-Other"]}

{"osvdb": [{"lastseen": "2017-04-28T13:20:10", "bulletinFamily": "software", "description": "## Vulnerability Description\nActive WebCam contains a flaw that may lead to an unauthorized information disclosure. \u00a0The issue is triggered when issuing a specially crafted URL, which causes the application to return an error message whether the file exists on the system or not resulting in a loss of confidentiality.\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nActive WebCam contains a flaw that may lead to an unauthorized information disclosure. \u00a0The issue is triggered when issuing a specially crafted URL, which causes the application to return an error message whether the file exists on the system or not resulting in a loss of confidentiality.\n## Manual Testing Notes\nhttp://[victim]:8080/c:\\nonexsit.txt\n\nhttp://[victim]:8080/c:\\boot.ini\n## References:\nVendor URL: http://www.pysoft.com\n[Secunia Advisory ID:14553](https://secuniaresearch.flexerasoftware.com/advisories/14553/)\n[Related OSVDB ID: 14638](https://vulners.com/osvdb/OSVDB:14638)\n[Related OSVDB ID: 14640](https://vulners.com/osvdb/OSVDB:14640)\n[Related OSVDB ID: 14639](https://vulners.com/osvdb/OSVDB:14639)\n[Related OSVDB ID: 14642](https://vulners.com/osvdb/OSVDB:14642)\nOther Advisory URL: http://secway.org/advisory/ad20050104.txt\nMail List Post: http://lists.grok.org.uk/pipermail/full-disclosure/2005-March/032334.html\nISS X-Force ID: 19654\n[CVE-2005-0733](https://vulners.com/cve/CVE-2005-0733)\nBugtraq ID: 12778\n", "modified": "2005-03-10T10:18:26", "published": "2005-03-10T10:18:26", "href": "https://vulners.com/osvdb/OSVDB:14641", "id": "OSVDB:14641", "type": "osvdb", "title": "Active WebCam Error Message File Existence Enumeration", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}], "nessus": [{"lastseen": "2019-02-21T01:08:26", "bulletinFamily": "scanner", "description": "The version of PY Software's Active WebCam web server running on the remote host is affected by multiple vulnerabilities:\n\n o Denial of Service Vulnerabilities.\n A request for a file on floppy drive may result in a dialog prompt, causing the service to cease until it is acknowledged by an administrator. In addition, requesting the file 'Filelist.html' reportedly causes CPU usage on the remote host to increase, ultimately leading to denial of service.\n\n o Information Disclosure Vulnerabilities.\n A request for a nonexistent file will return an error message with the installation path for the software. Further, error messages differ depending on whether a file exists or is inaccessible. An attacker may exploit these issues to gain information about the filesystem on the remote host.\n\nNote that while versions 4.3 and 5.5 are known to be affected, earlier versions are likely to be as well.", "modified": "2018-11-15T00:00:00", "id": "ACTIVEWEBCAM_MULTIPLE_VULNS.NASL", "href": "https://www.tenable.com/plugins/index.php?view=single&id=17320", "published": "2005-03-12T00:00:00", "title": "Active WebCam Webserver <= 5.5 Multiple Vulnerabilities (DoS, Path Disc)", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(17320);\n script_version(\"1.27\");\n script_cvs_date(\"Date: 2018/11/15 20:50:16\");\n\n script_cve_id(\"CVE-2005-0730\", \"CVE-2005-0731\", \"CVE-2005-0732\", \"CVE-2005-0733\", \"CVE-2005-0734\");\n script_bugtraq_id(12778);\n\n script_name(english:\"Active WebCam Webserver <= 5.5 Multiple Vulnerabilities (DoS, Path Disc)\");\n script_summary(english:\"Checks for multiple remote vulnerabilities in Active WebCam webserver 5.5 and older\");\n\n script_set_attribute(attribute:\"synopsis\", value:\"The remote web server is affected by multiple vulnerabilities.\");\n script_set_attribute(attribute:\"description\", value:\n\"The version of PY Software's Active WebCam web server running on the\nremote host is affected by multiple vulnerabilities:\n\n o Denial of Service Vulnerabilities.\n A request for a file on floppy drive may result in a dialog\n prompt, causing the service to cease until it is acknowledged by\n an administrator. In addition, requesting the file 'Filelist.html'\n reportedly causes CPU usage on the remote host to increase,\n ultimately leading to denial of service.\n\n o Information Disclosure Vulnerabilities.\n A request for a nonexistent file will return an error message\n with the installation path for the software. Further, error\n messages differ depending on whether a file exists or is\n inaccessible. An attacker may exploit these issues to gain\n information about the filesystem on the remote host.\n\nNote that while versions 4.3 and 5.5 are known to be affected, earlier\nversions are likely to be as well.\" );\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?df2bc6eb\");\n script_set_attribute(attribute:\"see_also\", value:\"https://seclists.org/fulldisclosure/2005/Mar/294\");\n script_set_attribute(attribute:\"solution\", value:\"Unknown at this time.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P\");\n script_set_cvss_temporal_vector(\"CVSS2#E:H/RL:U/RC:ND\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No exploit is required\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2005/03/10\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2005/03/12\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"remote\");\n script_end_attributes();\n\n script_category(ACT_MIXED_ATTACK);\n script_copyright(english:\"This script is Copyright (C) 2005-2018 Tenable Network Security, Inc.\");\n script_family(english:\"CGI abuses\");\n\n script_dependencies(\"http_version.nasl\");\n script_exclude_keys(\"Settings/disable_cgi_scanning\");\n script_require_ports(\"Services/www\", 8080);\n\n exit(0);\n}\n\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"http.inc\");\n\n\nport = get_http_port(default:8080);\n\n\n# Grab the main page and make sure it's for Active WebCam.\nres = http_get_cache(item:\"/\", port:port, exit_on_fail: 1);\nif ('name=\"GENERATOR\" content=\"Active WebCam' >!< res)\n exit(0, \"The web server on port \"+port+\" is not Active WebCam.\");\n\nif (safe_checks()) {\n if (egrep(string:res, pattern:'name=\"GENERATOR\" content=\"Active WebCam ([0-4][^0-9]|5\\\\.[0-5] )'))\n security_warning(port);\n}\nelse {\n # Let's request a nonexistent page and see if we can find the install path.\n # Use the number of microseconds in the time for the page.\n now = split(gettimeofday(), sep:\".\", keep:0);\n page = now[1];\n\n r = http_send_recv3(method:\"GET\", item:\"/\" + page, port:port);\n res = strcat(r[0], r[1], '\\r\\n', r[2]);\n\n pat = \"The requested file: <B>([^<]+)</B> was not found.\";\n matches = egrep(string:res, pattern:pat, icase:TRUE);\n foreach match (split(matches)) {\n match = chomp(match);\n path = eregmatch(pattern:pat, string:match);\n if (!isnull(path)) {\n path = path[1];\n if (ereg(string:path, pattern:\"^[A-Za-z]:\\\\\")) security_warning(port);\n }\n }\n}\n", "cvss": {"score": 5.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}]}