Y-Cam Camera Models Multiple Security Vulnerabilities

Bugtraq ID:	67447
Class:	Input Validation Error
CVE:	CVE-2014-1900 CVE-2014-1901 CVE-2014-1902
Remote:	Yes
Local:	No
Published:	Jan 05 2014 12:00AM
Updated:	Jan 05 2014 12:00AM
Credit:	David Aaron of Trustwave SpiderLabs
Vulnerable:	Y-cam Solutions Y-Cam YCW004 4.30 Y-cam Solutions Y-Cam YCW004 4.23 Y-cam Solutions Y-Cam YCW003 4.30 Y-cam Solutions Y-Cam YCW003 4.23 Y-cam Solutions Y-Cam YCW001 4.30 Y-cam Solutions Y-Cam YCW001 4.23 Y-cam Solutions Y-Cam YCK004 4.30 Y-cam Solutions Y-Cam YCK004 4.23 Y-cam Solutions Y-Cam YCK003 4.30 Y-cam Solutions Y-Cam YCK003 4.23 Y-cam Solutions Y-Cam YCK002 4.30 Y-cam Solutions Y-Cam YCK002 4.23 Y-cam Solutions Y-Cam YCEB03 4.30 Y-cam Solutions Y-Cam YCEB03 4.23 Y-cam Solutions Y-Cam YCBLHD5 4.30 Y-cam Solutions Y-Cam YCBLHD5 4.23 Y-cam Solutions Y-Cam YCBLB3 4.30 Y-cam Solutions Y-Cam YCBLB3 4.23 Y-cam Solutions Y-Cam YCBL03 4.30 Y-cam Solutions Y-Cam YCBL03 4.23 Y-cam Solutions Y-Cam YCB004 4.30 Y-cam Solutions Y-Cam YCB004 4.23 Y-cam Solutions Y-Cam YCB003 4.30 Y-cam Solutions Y-Cam YCB003 4.23 Y-cam Solutions Y-Cam YCB002 4.30 Y-cam Solutions Y-Cam YCB002 4.23 Y-cam Solutions Y-Cam YCB001 4.30 Y-cam Solutions Y-Cam YCB001 4.23
Not Vulnerable:	Y-cam Solutions Y-Cam YCW004 4.51 Y-cam Solutions Y-Cam YCW004 4.50 Y-cam Solutions Y-Cam YCW003 4.51 Y-cam Solutions Y-Cam YCW003 4.50 Y-cam Solutions Y-Cam YCW001 4.51 Y-cam Solutions Y-Cam YCK004 4.51 Y-cam Solutions Y-Cam YCK004 4.50 Y-cam Solutions Y-Cam YCK003 4.51 Y-cam Solutions Y-Cam YCK003 4.50 Y-cam Solutions Y-Cam YCK002 4.51 Y-cam Solutions Y-Cam YCK002 4.50 Y-cam Solutions Y-Cam YCEB03 4.51 Y-cam Solutions Y-Cam YCEB03 4.50 Y-cam Solutions Y-Cam YCBLHD5 4.51 Y-cam Solutions Y-Cam YCBLHD5 4.50 Y-cam Solutions Y-Cam YCBLB3 4.51 Y-cam Solutions Y-Cam YCBLB3 4.50 Y-cam Solutions Y-Cam YCBL03 4.51 Y-cam Solutions Y-Cam YCBL03 4.50 Y-cam Solutions Y-Cam YCB004 4.51 Y-cam Solutions Y-Cam YCB004 4.50 Y-cam Solutions Y-Cam YCB003 4.51 Y-cam Solutions Y-Cam YCB003 4.50 Y-cam Solutions Y-Cam YCB002 4.51 Y-cam Solutions Y-Cam YCB002 4.50 Y-cam Solutions Y-Cam YCB001 4.51 Y-cam Solutions Y-Cam YCB001 4.50

Y-Cam Camera Models Multiple Security Vulnerabilities

Multiple Y-Cam Camera Models are prone to the following security vulnerabilities:

1. A directory-traversal vulnerability
2. Multiple denial-of-service vulnerabilities
3. Multiple HTML-injection vulnerabilities

An attacker can exploit these issues to perform unauthorized actions, bypass security restrictions, cause denial-of-service conditions, execute attacker-supplied HTML or JavaScript code in the context of the affected site, to steal cookie-based authentication credentials or gain access to sensitive information.

Y-Cam Camera Models Multiple Security Vulnerabilities

References:

• Y-Cam Homepage (Y-Cam)
  
• Y-cam Security Fix (Y-Cam)
  
• Trustwave SpiderLabs Security Advisory TWSL2014-007 (Trustwave SpiderLabs Security)