high7.8Public exploit code
CVE-2013-5582
Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentica…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ammyy Admin 3.2 - Authentication Bypass2014-01-24 · local · windows
Impact
Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by running a local program that extracts a field from the AA_v3.2.exe file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ammyy | Ammyy Admin | through 3.2 |