Seyeon FlexWATCH Network Video Server Unauthorized Administrative Access Vulnerability
BID:8942
Info
Seyeon FlexWATCH Network Video Server Unauthorized Administrative Access Vulnerability
| Bugtraq ID: | 8942 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 31 2003 12:00AM |
| Updated: | Oct 31 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to slaizer. |
| Vulnerable: |
Seyeon FlexWATCH Network Video Server 2.2 Seyeon FlexWATCH Network Video Server Model 132 |
| Not Vulnerable: | |
Discussion
Seyeon FlexWATCH Network Video Server Unauthorized Administrative Access Vulnerability
It has been reported that FlexWATCH Network Video Server may be prone to an access validation error that may allow a remote attacker to gain administrative access to the system. The problem is reported to present itself when an attacker attempts to access the administrative interface using a specially crafted URL containing two slash '/' characters.
Successful exploitation of this issue may allow a remote attacker to gain administrator level privileges to the server. This may lead to user accounts and system configuration modifications.
FlexWATCH Network Video Server Model 132 has been reported to be prone to this issue, however other versions may be affected as well.
It has been reported that FlexWATCH Network Video Server may be prone to an access validation error that may allow a remote attacker to gain administrative access to the system. The problem is reported to present itself when an attacker attempts to access the administrative interface using a specially crafted URL containing two slash '/' characters.
Successful exploitation of this issue may allow a remote attacker to gain administrator level privileges to the server. This may lead to user accounts and system configuration modifications.
FlexWATCH Network Video Server Model 132 has been reported to be prone to this issue, however other versions may be affected as well.
Exploit / POC
Seyeon FlexWATCH Network Video Server Unauthorized Administrative Access Vulnerability
The following proof of concept has been provided:
http://www.example.com//admin/aindex.htm
The following proof of concept has been provided:
http://www.example.com//admin/aindex.htm
Solution / Fix
Seyeon FlexWATCH Network Video Server Unauthorized Administrative Access Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Seyeon FlexWATCH Network Video Server Unauthorized Administrative Access Vulnerability
References:
References: