Lucene search

[email protected]CVE-2010-0550

HistoryFeb 04, 2010 - 8:15 p.m.

CVE-2010-0550

2010-02-0420:15:50

CWE-287

[email protected]

web.nvd.nist.gov

cve-2010-0550

admin.htm

geo++ gncaster

authentication bypass

nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.3%

JSON

admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy.

Affected configurations

NVD

Node

geoppgeo\+\+_gncasterRange≤1.4.0.7

geoppgeo\+\+_gncasterMatch1.4.0.0

CPENameOperatorVersion
geopp:geo\+\+_gncastergeopp geo++ gncasterle1.4.0.7
geopp:geo\+\+_gncastergeopp geo++ gncastereq1.4.0.0

CPE	Name	Operator	Version
geopp:geo\+\+_gncaster	geopp geo++ gncaster	le	1.4.0.7
geopp:geo\+\+_gncaster	geopp geo++ gncaster	eq	1.4.0.0

References

osvdb.org/62013

secunia.com/advisories/38323

www.redteam-pentesting.de/en/advisories/rt-sa-2010-003/-geo-r-gncaster-faulty-implementation-of-http-digest-authentication

www.securityfocus.com/archive/1/509199/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/55976

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.3%

JSON

Related for CVE-2010-0550

prion1 cvelist1 nvd1