EUVD-2005-2790

Malware in sbrugna...

EUVD-2005-2792

Malware in sbrugna...

CVE-2005-2790

The CVE-2005-2790 entry affects BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier. The vulnerability arises because the system relies on the client to enforce permissions and perform actions (e.g., disconnections), allowing remote attackers to bypass adminis...

CVE-2005-2789

The CVE-2005-2789 entry affects BFCommand & Control Server Manager BFCC 1.22_A and earlier and BFVCC 2.14_B and earlier. The underlying issue is an authentication bypass that can be triggered by either an unknown attack vector or using a NULL (0x00) as the username. CVSS v2 base score is 7.5 (HIG...

CVE-2005-2789: Undefined Security Weakness

BFCommand & Control Server Manager BFCC 1.22A and earlier, and BFVCC 2.14B and earlier, allows remote attackers to bypass authentication via 1 an unknown attack vector or 2 a NULL 0x00 as a username...

CVE-2005-2790: Undefined Security Weakness

BFCommand & Control Server Manager BFCC 1.22A and earlier, and BFVCC 2.14B and earlier, relies on the client to enforce permissions and perform actions such as disconnections, which allows remote attackers to bypass administrative restrictions via a modified client...

CVE-2005-2791: Undefined Security Weakness

BFCommand & Control Server Manager BFCC 1.22A and earlier, and BFVCC 2.14B and earlier, allows remote attackers to cause a denial of service refused new connections via a series of connections and disconnections without sending the login command...

bfcommand & control server 1.22/2.0/2.14 manager - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/14690/info BFCC and BFVCC server managers are vulnerable to multiple remote vulnerabilities. The first two issues are login bypass vulnerabilities. These issues allow remote, anonymous attackers to gain access to the affected server process. The third iss...