Authentication flaw

2007-08-1618:17:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.3%

JSON

The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow remote attackers to bypass authentication by reconnecting after a connection closes.

CPENameOperatorVersion
babo_violentle2.2.08.00

CPE	Name	Operator	Version
	babo_violent	le	2.2.08.00

References

aluigi.altervista.org/adv/bv2x-adv.txt

securityreason.com/securityalert/3024

www.securityfocus.com/archive/1/476520/100/0/threaded