CORE-2003-0403: Axis Network Camera HTTP Authentication Bypass

Core Security Technologies Advisory http://www.coresecurity.com Axis Network Camera HTTP Authentication Bypass Date Published: 2003-05-27 Last Update: 2003-05-23 Advisory ID: CORE-2003-0403 Bugtraq ID: 7652 CVE Name: CAN-2003-0240 Title: Axis Network Camera HTTP Authentication Bypass Class: Acces...

core.axis.txt

Core Security Technologies Advisory http://www.coresecurity.com Axis Network Camera HTTP Authentication Bypass Date Published: 2003-05-27 Last Update: 2003-05-23 Advisory ID: CORE-2003-0403 Bugtraq ID: 7652 CVE Name: CAN-2003-0240 Title: Axis Network Camera HTTP Authentication Bypass Class: Acces...

Axis Network Camera unauthorized access

By adding additional / after hostname in Web access URL it's possible to bypass authentication...

Axis Network Camera 2.x - HTTP Authentication Bypass

Axis Network Camera 2.x - HTTP Authentication Bypass source: https://www.securityfocus.com/bid/7652/info A vulnerability has been discovered in various Axis Communications products. By making a request for a specially formatted URL, it may be possible for remote users to access the administrative...

Axis Network Camera 2.x - HTTP Authentication Bypass

source: https://www.securityfocus.com/bid/7652/info A vulnerability has been discovered in various Axis Communications products. By making a request for a specially formatted URL, it may be possible for remote users to access the administrative configuration interface without being prompted for...

Axis Network Camera HTTP Authentication Bypass

Advisory ID Internal CORE-2003-0403 Core Security Technologies Advisory http://www.coresecurity.com Date Published: 2003-05-27 Last Update: 2003-05-23 Advisory ID: CORE-2003-0403 Bugtraq ID: 7652 CVE Name: CAN-2003-0240 Title: Axis Network Camera HTTP Authentication Bypass Class: Access Validatio...

Axis 2400 Network Camera Multiple Vulnerabilities

The remote Axis Network Camera is affected by multiple vulnerabilities : - It is possible for an attacker to view the remote '/var/log/messages' file providing an attacker with access to sensitive information. - There is a flaw in the 'buffername' and 'format' parameters when calling the...

Axis Communications HTTP Server 2.x - Messages Information Disclosure

Axis Communications HTTP Server 2.x - Messages Information Disclosure source: https://www.securityfocus.com/bid/6980/info It has been reported that the Axis Video Server does not properly secure sensitive information. Because of this, an attacker may be able to gather details about server operati...

Axis Communications Video Server 2.x - Command.cgi File Creation

Axis Communications Video Server 2.x - Command.cgi File Creation source: https://www.securityfocus.com/bid/6987/info It has been reported that the Axis Video Servers do not properly handle input to the 'command.cgi' script. Because of this, an attacker may be able to create arbitrary files that...

Axis Communications HTTP Server 2.x - Messages Information Disclosure

source: https://www.securityfocus.com/bid/6980/info It has been reported that the Axis Video Server does not properly secure sensitive information. Because of this, an attacker may be able to gather details about server operation and traffic that could lead to further attacks...

Axis Communications Video Server 2.x - 'Command.cgi' File Creation

source: https://www.securityfocus.com/bid/6987/info It has been reported that the Axis Video Servers do not properly handle input to the 'command.cgi' script. Because of this, an attacker may be able to create arbitrary files that would result in a denial of service, or potentially command...

Web server vulnerability in Axis Network Cameras, Video Servers and DVRs

Date: 20 December 2002 1. Topic Web server vulnerability in Axis Network Cameras, Video Servers and Network Digital Video Recorders. 2. Description A potential stack buffer overflow has been found in the authentication code of the modified version of Boa used in some of the embedded Linux based...

Buffer overflow in Axis video products

Buffer overflow in Web interface...

CVE-2001-1543

Axis network camera 2120, 2110, 2100, 200+ and 200 contains a default administration password "pass", which allows remote attackers to gain access to the camera...

CVE-2000-0191

Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. dot dot attack...

CVE-2000-0191

The CVE-2000-0191 issue affects Axis StorPoint CD. A directory traversal vulnerability allows remote attackers to reach administrator URLs without authentication by exploiting a .. sequence, enabling an authentication bypass. The Nessus entry references a specific crafted URL path (e.g., /cd/../c...

Axis Camera Default Password

The remote host seems to be an Axis Network Camera. It was possible to log into the remote host with the default credentials 'root/pass'. An attacker may use these credentials to trivially access the system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Script audit and contributions from...

CVE-2000-0144

CVE-2000-0144 (Axis 700 Network Scanner) involves improper access control: administrator URLs are not properly restricted, permitting a dot-dot directory traversal to bypass password protection. Affected: Axis 700 Network Scanner; Trigger: access to admin URLs via .. traversal; Impact: password b...

CVE-2000-0144

Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. dot dot attack...

Axis Storpoint CD Admin Authentication Bypass

The remote host is running Axis StorPoint. It is possible to access the administration interface with a specially crafted URL that contains directory traversal characters. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...