Vulnerability CVE-2003-1363

Vulnerability CVE-2003-1363

Published: 2003-12-31 Modified: 2012-02-12

Description:

The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mount brute force attacks on the administration console without detection.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:N)

CVSS Base Score	Impact Subscore	Exploitability Subscore
6.4/10	4.9/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	None

Affected software
Aprelium technologies -> Abyss web server

References:

http://www.securityfocus.com/bid/6842

http://www.iss.net/security_center/static/11310.php

http://archives.neohapsis.com/archives/bugtraq/2003-02/0149.html

Copyright 2024, cxsecurity.com