Axis Communications HTTP Server Messages Information Disclosure Vulnerability

Bugtraq ID:	6980
Class:	Configuration Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 28 2003 12:00AM
Updated:	Feb 28 2003 12:00AM
Credit:	Discovery credited to Martin Eiszner <[email protected]>.
Vulnerable:	Axis Communications 2401 Video Server 2.33 Axis Communications 2401 Video Server 2.32 Axis Communications 2401 Video Server 2.31 Axis Communications 2401 Video Server 2.20 Axis Communications 2400 Video Server 2.33 Axis Communications 2400 Video Server 2.32 Axis Communications 2400 Video Server 2.31 Axis Communications 2400 Video Server 2.20 Axis Communications 2400 Video Server 2.0
Not Vulnerable:

Axis Communications HTTP Server Messages Information Disclosure Vulnerability

It has been reported that the Axis Video Server does not properly secure sensitive information. Because of this, an attacker may be able to gather details about server operation and traffic that could lead to further attacks.

Axis Communications HTTP Server Messages Information Disclosure Vulnerability

References:

• Network Camera and Video Servers (Axis Communications)
  
• Axis Video and Camera Servers - System log access and file access/overwrite via (Axis Product Security )
  
• axis2400 webcams (Martin Eiszner )