critical10.0Public exploit code
CVE-2003-0240
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Axis Network Camera 2.x - HTTP Authentication Bypass2003-05-27 · remote · hardware · Verified
Impact
The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and modify configuration via an HTTP request to the admin/admin.shtml containing a leading // (double slash).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Axis | 2100 Network Camera | through 2.32 |
| Axis | 2110 Network Camera | through 2.32 |
| Axis | 2120 Network Camera | through 2.32 |
| Axis | 2130 Ptz Network Camera | through 2.32 |
| Axis | 2400 Video Server | through 2.32 |
| Axis | 2401 Video Server | through 2.32 |
| Axis | 2420 Network Camera | through 2.32 |
| Axis | 2460 Network Dvr | through 3.00 |
| Axis | 250s Video Server | through 3.02 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=105406374731579&w=2
- http://secunia.com/advisories/8876
- http://securitytracker.com/id?1006854
- http://www.coresecurity.com/common/showdoc.php?idx=329&idxseccion=10
- http://www.kb.cert.org/vuls/id/799060
- http://www.osvdb.org/4804
- http://www.securityfocus.com/bid/7652
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12104
- http://marc.info/?l=bugtraq&m=105406374731579&w=2
- http://secunia.com/advisories/8876
- http://securitytracker.com/id?1006854
- http://www.coresecurity.com/common/showdoc.php?idx=329&idxseccion=10
- http://www.kb.cert.org/vuls/id/799060
- http://www.osvdb.org/4804
- http://www.securityfocus.com/bid/7652
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12104