critical10.0Public exploit code
CVE-2009-1443
Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- OCS Inventory NG Server 1.3.1 - 'LOGIN' Remote Authentication Bypass2010-05-06 · webapps · php
Impact
Multiple unspecified vulnerabilities in the Server component in OCS Inventory NG before 1.02 have unknown impact and attack vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ocsinventory-Ng | Ocs Inventory Ng | through 1.01 Version 1.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/34763
- http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=51
- http://www.securityfocus.com/bid/34694
- http://www.vupen.com/english/advisories/2009/1152
- http://secunia.com/advisories/34763
- http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=133&cntnt01returnid=51
- http://www.securityfocus.com/bid/34694
- http://www.vupen.com/english/advisories/2009/1152