CVE-2006-1257

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 30%

probabilidade de exploração

30%top 2% das CVEs

exploração observada

nãonenhuma fonte reporta

The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.

Produtos afetados

n/a · n/a

Referências

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/csvr2002/htm/cs_se_securityconcepts_cbgw.asp http://securityreason.com/securityalert/594 https://exchange.xforce.ibmcloud.com/vulnerabilities/25330 http://www.osvdb.org/24121 http://www.securityfocus.com/archive/1/427974/100/0/threaded http://www.securityfocus.com/bid/17134