Lucene search

MitreCVE-2007-4151

HistoryAug 03, 2007 - 8:17 p.m.

CVE-2007-4151

2007-08-0320:17:00

mitre

web.nvd.nist.gov

cve-2007-4151

visionsoft audit

vsaod

remote attackers

sensitive information

log.on command

ver command

version number disclosure

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to obtain sensitive information via (1) a LOG.ON command, which reveals the logging pathname in the server response; (2) a VER command, which reveals the version number in the server response; and (3) a connection, which reveals the version number in the banner.

Affected configurations

Nvd

Node

visionsoftauditMatch12.4.0.0

VendorProductVersionCPE
visionsoftaudit12.4.0.0cpe:2.3:a:visionsoft:audit:12.4.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
visionsoft	audit	12.4.0.0	cpe:2.3:a:visionsoft:audit:12.4.0.0:::::::*

References

osvdb.org/46981

osvdb.org/46982

osvdb.org/46983

www.portcullis.co.uk/uplds/advisories/vapathdisclosure%2006-043.txt

www.portcullis.co.uk/uplds/advisories/vaversiondisclosure%2006_046.txt

www.securityfocus.com/bid/25153

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

7.3

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Related for CVE-2007-4151