Vulnerability CVE-2007-0655


Published: 2007-05-02   Modified: 2012-02-12

Description:
The MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, allows remote or local attackers to gain privileges and execute arbitrary commands by connecting directly to TCP port 2222.

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Microworld technologies -> Escan 

 References:
http://www.vupen.com/english/advisories/2007/1609
http://www.securitytracker.com/id?1018007
http://www.securityfocus.com/bid/23759
http://secunia.com/secunia_research/2007-45/advisory/
http://secunia.com/advisories/23809
http://osvdb.org/35732
http://xforce.iss.net/xforce/xfdb/34009

Copyright 2024, cxsecurity.com

 

Back to Top