Detections
Analytics
Axis 2400 Network Camera Multiple Vulnerabilities
medium Nessus Plugin ID 11298
Synopsis
The remote video server is affected by multiple vulnerabilities.Description
The remote Axis Network Camera is affected by multiple vulnerabilities :- It is possible for an attacker to view the remote '/var/log/messages' file providing an attacker with access to sensitive information.
- There is a flaw in the 'buffername' and 'format' parameters when calling the '/axis-cgi/buffer/command.cgi' script which could allow an attacker to overwrite system files.
- An unspecified vulnerability in the authentication code module results in a stack overflow.
Solution
There is no known solution at this time.See Also
http://archive.cert.uni-stuttgart.de/bugtraq/2002/12/msg00219.html
https://seclists.org/bugtraq/2003/Feb/378
https://seclists.org/bugtraq/2003/Mar/361
http://archive.cert.uni-stuttgart.de/bugtraq/2003/03/msg00347.html
Plugin Details
Severity: Medium
ID: 11298
File Name: axis2400_webcams.nasl
Version: 1.23
Type: remote
Family: CGI abuses
Published: 3/1/2003
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.0
CVSS v2
Risk Factor: Medium
Base Score: 6.4
Temporal Score: 6.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:P
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Vulnerability Publication Date: 12/20/2002
Reference Information
CVE: CVE-2003-1386