3 matches found
CVE-2005-1552
GeoVision Digital Video Surveillance System versions 6.04, 6.1 and 7.0 expose JPEG images despite having a password/username set, due to improper protection of image files. The issue allows remote attackers to obtain sensitive information by making a direct request to the image, effectively bypas...
CVE-2009-5087
CVE-2009-5087 refers to a directory traversal vulnerability in Geovision Digital Video Surveillance System 8.2, affecting the geohttpserver component. The issue allows remote attackers to read arbitrary files via a .. (dot-dot) in a GET request. The primary affected product is Geovision’s DVSS 8....
CVE-2005-1553
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 use a weak password encryption scheme that enables password sniffing by remote attackers. The provided documents do not include specifics on affected components, root cause details beyond the weak crypto description, or a published rem...