Detections
Analytics
TrackerCam Multiple Remote Vulnerabilities
high Nessus Plugin ID 17160
Language:
Synopsis
The remote web server is affected by multiple vulnerabilities.Description
The remote host is running TrackerCam, a HTTP software that allows a user to publish a webcam feed thru a website.The remote version of this software is affected by multiple vulnerabilities :
- Buffer overflows which may allow an attacker to execute arbitrary code on the remote host.
- A directory traversal bug that may allow an attacker to read arbitrary files on the remote host with the privileges of the web server daemon.
- A cross-site scripting issue that may allow an attacker to use the remote host to perform a cross-site scripting attack.
Solution
Unknown at this time.See Also
https://www.securityfocus.com/archive/1/390918/30/0/threaded
Plugin Details
Severity: High
ID: 17160
File Name: trackercam_multiple_vulnerabilities.nasl
Version: 1.18
Type: remote
Family: CGI abuses
Published: 2/21/2005
Updated: 1/19/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.1
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Exploit Ease: No exploit is required
Vulnerability Publication Date: 2/18/2005
Exploitable With
Metasploit (TrackerCam PHP Argument Buffer Overflow)
Reference Information
CVE: CVE-2005-0478, CVE-2005-0479, CVE-2005-0480, CVE-2005-0481, CVE-2005-0482
BID: 12592