Vulnerability Details : CVE-2004-2612
BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote attackers to use the functionality intended for authorized users.
Products affected by CVE-2004-2612
- cpe:2.3:a:bnc:bnc:2.9.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2004-2612
0.91%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 74 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-2612
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2004-2612
-
http://secunia.com/advisories/13302
About Secunia Research | FlexeraPatch;Vendor Advisory
-
http://www.osvdb.org/12144
Patch
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/18103
BNC invalid password bypass authentication CVE-2004-2612 Vulnerability Report
-
http://www.gotbnc.com/changes.html#2.9.1
Error 404 (Not Found)!!1
-
http://www.securityfocus.com/bid/11650
Patch
Jump to