Lucene search
HistoryApr 20, 2010 - 2:30 p.m.
CVE-2009-4770
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0.007
Percentile
81.2%
The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access.
Affected configurations
Node
jasperhttpdxMatch1.4
ORjasperhttpdxMatch1.4.5
ORjasperhttpdxMatch1.4.6
ORjasperhttpdxMatch1.4.6b
ORjasperhttpdxMatch1.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| jasper | httpdx | 1.4 | cpe:2.3:a:jasper:httpdx:1.4:*:*:*:*:*:*:* |
| jasper | httpdx | 1.4.5 | cpe:2.3:a:jasper:httpdx:1.4.5:*:*:*:*:*:*:* |
| jasper | httpdx | 1.4.6 | cpe:2.3:a:jasper:httpdx:1.4.6:*:*:*:*:*:*:* |
| jasper | httpdx | 1.4.6b | cpe:2.3:a:jasper:httpdx:1.4.6b:*:*:*:*:*:*:* |
| jasper | httpdx | 1.5 | cpe:2.3:a:jasper:httpdx:1.5:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2009-4770
2010-04-20 14:30:01
cvelist
cvelist
CVE-2009-4770
2010-04-20 14:00:00
prion
prion
Default credentials
2010-04-20 14:30:00
openvas
openvas
httpdx Multiple Vulnerabilities
2010-07-26 00:00:00
httpdx Multiple Vulnerabilities
2010-07-26 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0.007
Percentile
81.2%
Related for NVD:CVE-2009-4770