BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.
References
Link | Resource |
---|---|
http://aluigi.altervista.org/adv/bfccown-adv.txt | Exploit Vendor Advisory |
http://marc.info/?l=bugtraq&m=112534155318828&w=2 | |
http://secunia.com/advisories/16629/ | Vendor Advisory |
http://www.securityfocus.com/bid/14690 | Exploit |
https://exchange.xforce.ibmcloud.com/vulnerabilities/22055 |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2005-09-02 23:03
Updated : 2017-07-11 01:32
NVD link : CVE-2005-2789
Mitre link : CVE-2005-2789
CVE.ORG link : CVE-2005-2789
JSON object : View
Products Affected
bfcommand_and_control_software
- bfcc
- bfvcc
CWE