Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2004-2254

SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.

Published

2004-12-31T05:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-Other

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	netwin	surgeldap	1.0a	Yes
Application	netwin	surgeldap	1.0b	Yes
Application	netwin	surgeldap	1.0d	Yes
Application	netwin	surgeldap	1.0e	Yes
Application	netwin	surgeldap	1.0f	Yes
Application	netwin	surgeldap	1.0g	Yes

References

http://netwinsite.com/surgeldap/updates.htm Patch ([email protected])
http://secunia.com/advisories/11549 Exploit, Vendor Advisory ([email protected])
http://securitytracker.com/alerts/2004/May/1010113.html Exploit, Patch ([email protected])
http://securitytracker.com/id?1010068 Exploit ([email protected])
http://www.osvdb.org/5890 Exploit, Patch ([email protected])
http://www.securityfocus.com/bid/10294 Exploit ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/16076 ([email protected])
http://netwinsite.com/surgeldap/updates.htm Patch (af854a3a-2127-422b-91ae-364da2661108)
http://secunia.com/advisories/11549 Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/alerts/2004/May/1010113.html Exploit, Patch (af854a3a-2127-422b-91ae-364da2661108)
http://securitytracker.com/id?1010068 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.osvdb.org/5890 Exploit, Patch (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/10294 Exploit (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/16076 (af854a3a-2127-422b-91ae-364da2661108)