CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Vulnerability Details : CVE-2004-2427

Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.cgi, modify system information via (5) setparam.cgi and (6) factorydefault.cgi, or (7) cause a denial of service (reboot) via restart.cgi.
Publish Date : 2004-12-31 Last Update Date : 2008-09-05
Collapse All   Expand All   Select   Select&Copy  
Related Tweets   Even more tweets   Search Twitter   Search YouTube   Search Google

- CVSS Scores & Vulnerability Types

Cvss Score
10.0
Confidentiality Impact Complete (There is total information disclosure, resulting in all system files being revealed.)
Integrity Impact Complete (There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised.)
Availability Impact Complete (There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable.)
Access Complexity Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication Not required (Authentication is not required to exploit the vulnerability.)
Gained Access None
Vulnerability Type(s) Denial Of ServiceObtain Information
CWE ID CWE id is not defined for this vulnerability

- Products Affected By CVE-2004-2427

# Product Type Vendor Product Version Update Edition Language
1 Hardware Axis 2100 Network Camera 2.12 Details Vulnerabilities
2 Hardware Axis 2100 Network Camera 2.30 Details Vulnerabilities
3 Hardware Axis 2100 Network Camera 2.31 Details Vulnerabilities
4 Hardware Axis 2100 Network Camera 2.32 Details Vulnerabilities
5 Hardware Axis 2100 Network Camera 2.33 Details Vulnerabilities
6 Hardware Axis 2100 Network Camera 2.34 Details Vulnerabilities
7 Hardware Axis 2100 Network Camera 2.40 Details Vulnerabilities
8 Hardware Axis 2100 Network Camera 2.41 Details Vulnerabilities
9 Hardware Axis 2110 Network Camera 2.12 Details Vulnerabilities
10 Hardware Axis 2110 Network Camera 2.30 Details Vulnerabilities
11 Hardware Axis 2110 Network Camera 2.31 Details Vulnerabilities
12 Hardware Axis 2110 Network Camera 2.32 Details Vulnerabilities
13 Hardware Axis 2110 Network Camera 2.34 Details Vulnerabilities
14 Hardware Axis 2110 Network Camera 2.40 Details Vulnerabilities
15 Hardware Axis 2110 Network Camera 2.41 Details Vulnerabilities
16 Hardware Axis 2120 Network Camera 2.12 Details Vulnerabilities
17 Hardware Axis 2120 Network Camera 2.30 Details Vulnerabilities
18 Hardware Axis 2120 Network Camera 2.31 Details Vulnerabilities
19 Hardware Axis 2120 Network Camera 2.32 Details Vulnerabilities
20 Hardware Axis 2120 Network Camera 2.34 Details Vulnerabilities
21 Hardware Axis 2120 Network Camera 2.40 Details Vulnerabilities
22 Hardware Axis 2120 Network Camera 2.41 Details Vulnerabilities
23 Hardware Axis 2130 Ptz Network Camera 2.30 Details Vulnerabilities
24 Hardware Axis 2130 Ptz Network Camera 2.31 Details Vulnerabilities
25 Hardware Axis 2130 Ptz Network Camera 2.32 Details Vulnerabilities
26 Hardware Axis 2130 Ptz Network Camera 2.34 Details Vulnerabilities
27 Hardware Axis 2130 Ptz Network Camera 2.40 Details Vulnerabilities
28 Hardware Axis 230 Mpeg2 Video Server 3.11 Details Vulnerabilities
29 Hardware Axis 2400 Video Server 1.1 Details Vulnerabilities
30 Hardware Axis 2400 Video Server 1.2 Details Vulnerabilities
31 Hardware Axis 2400 Video Server 1.10 Details Vulnerabilities
32 Hardware Axis 2400 Video Server 1.11 Details Vulnerabilities
33 Hardware Axis 2400 Video Server 1.12 Details Vulnerabilities
34 Hardware Axis 2400 Video Server 1.15 Details Vulnerabilities
35 Hardware Axis 2400 Video Server 2.0 Details Vulnerabilities
36 Hardware Axis 2400 Video Server 2.20 Details Vulnerabilities
37 Hardware Axis 2400 Video Server 2.30 Details Vulnerabilities
38 Hardware Axis 2400 Video Server 2.31 Details Vulnerabilities
39 Hardware Axis 2400 Video Server 2.32 Details Vulnerabilities
40 Hardware Axis 2400 Video Server 2.33 Details Vulnerabilities
41 Hardware Axis 2400 Video Server 2.34 Details Vulnerabilities
42 Hardware Axis 2400 Video Server 3.11 Details Vulnerabilities
43 Hardware Axis 2400 Video Server 3.12 Details Vulnerabilities
44 Hardware Axis 2401 Video Server 1.0 1 Details Vulnerabilities
45 Hardware Axis 2401 Video Server 1.15 Details Vulnerabilities
46 Hardware Axis 2401 Video Server 2.20 Details Vulnerabilities
47 Hardware Axis 2401 Video Server 2.30 Details Vulnerabilities
48 Hardware Axis 2401 Video Server 2.31 Details Vulnerabilities
49 Hardware Axis 2401 Video Server 2.32 Details Vulnerabilities
50 Hardware Axis 2401 Video Server 2.33 Details Vulnerabilities
51 Hardware Axis 2401 Video Server 2.34 Details Vulnerabilities
52 Hardware Axis 2401 Video Server 3.12 Details Vulnerabilities
53 Hardware Axis 2401 Video Server 3.13 Details Vulnerabilities
54 Hardware Axis 2411 Video Server 3.12 Details Vulnerabilities
55 Hardware Axis 2411 Video Server 3.13 Details Vulnerabilities
56 Hardware Axis 2420 Network Camera 2.12 Details Vulnerabilities
57 Hardware Axis 2420 Network Camera 2.30 Details Vulnerabilities
58 Hardware Axis 2420 Network Camera 2.31 Details Vulnerabilities
59 Hardware Axis 2420 Network Camera 2.32 Details Vulnerabilities
60 Hardware Axis 2420 Network Camera 2.33 Details Vulnerabilities
61 Hardware Axis 2420 Network Camera 2.34 Details Vulnerabilities
62 Hardware Axis 2420 Network Camera 2.40 Details Vulnerabilities
63 Hardware Axis 2420 Network Camera 2.41 Details Vulnerabilities
64 Hardware Axis 2420 Video Server 2.32 Details Vulnerabilities
65 Hardware Axis 2420 Video Server 2.34 Details Vulnerabilities
66 Hardware Axis 2460 Network Dvr Details Vulnerabilities
67 Hardware Axis 2460 Network Dvr 3.10 Details Vulnerabilities
68 Hardware Axis 2460 Network Dvr 3.11 Details Vulnerabilities
69 Hardware Axis 2490 Serial Server Details Vulnerabilities
70 Hardware Axis 2490 Serial Server 2.11.3 Details Vulnerabilities
71 Hardware Axis 250s Video Server Details Vulnerabilities
72 Hardware Axis 250s Video Server 3.03 Details Vulnerabilities
73 Hardware Axis 250s Video Server 3.10 Details Vulnerabilities
74 Hardware Axis Storpoint Cd Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor Product Vulnerable Versions
Axis 2100 Network Camera 8
Axis 2110 Network Camera 7
Axis 2120 Network Camera 7
Axis 2130 Ptz Network Camera 5
Axis 230 Mpeg2 Video Server 1
Axis 2400 Video Server 15
Axis 2401 Video Server 10
Axis 2411 Video Server 2
Axis 2420 Network Camera 8
Axis 2420 Video Server 2
Axis 2460 Network Dvr 3
Axis 2490 Serial Server 2
Axis 250s Video Server 3
Axis Storpoint Cd 1

- References For CVE-2004-2427

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html
FULLDISC 20040822 [PoC] Nasty bug(s) found in Axis Network Camera/Video Servers
http://securitytracker.com/id?1011056
SECTRACK 1011056
http://www.osvdb.org/9123
OSVDB 9123
http://www.osvdb.org/9125
OSVDB 9125
http://www.osvdb.org/9126
OSVDB 9126
http://www.osvdb.org/9127
OSVDB 9127
http://www.osvdb.org/9128
OSVDB 9128
http://www.osvdb.org/9130
OSVDB 9130
http://www.osvdb.org/9129
OSVDB 9129

- Metasploit Modules Related To CVE-2004-2427

There are not any metasploit modules related to this vulnerability (Please visit www.metasploit.com for more information)
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.