critical10.0Public exploit code
CVE-2003-1160
FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that c…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Seyeon FlexWATCH Network Video Server 2.2 - Unauthorized Administrative Access2003-10-31 · remote · hardware · Verified
Impact
FlexWATCH Network video server 132 allows remote attackers to bypass authentication and gain administrative privileges via an HTTP request to aindex.htm that contains double leading slashes (//).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seyeon | Flexwatch Network Video Server | Versions 2.2, model_132 |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.nl/0310-exploits/FlexWATCH.txt
- http://secunia.com/advisories/10132
- http://securitytracker.com/id?1008049
- http://www.osvdb.org/2842
- http://www.securityfocus.com/bid/8942
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13567
- http://packetstormsecurity.nl/0310-exploits/FlexWATCH.txt
- http://secunia.com/advisories/10132
- http://securitytracker.com/id?1008049
- http://www.osvdb.org/2842
- http://www.securityfocus.com/bid/8942
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13567