PT-2003-2331 · Axis · Axis 2400 Video Server
CVE-2003-1386
·
Publicado
2003-12-31
·
Atualizado
2017-07-29
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
AXIS 2400 Video Server versions 2.00 through 2.33
Description
The issue allows remote attackers to obtain sensitive information via an HTTP request to "/support/messages", which displays the server's /var/log/messages file.
Recommendations
For versions 2.00 through 2.33, as a temporary workaround, consider restricting access to the "/support/messages" endpoint until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Axis 2400 Video Server