CVE-2009-4770 : The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a defa

The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access.

Published 2010-04-20 14:30:01

Updated 2010-06-07 04:00:00

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2009-4770

Jasper » Httpdx » Version: 1.4
cpe:2.3:a:jasper:httpdx:1.4:*:*:*:*:*:*:*
Matching versions
Jasper » Httpdx » Version: 1.4.6b
cpe:2.3:a:jasper:httpdx:1.4.6b:*:*:*:*:*:*:*
Matching versions
Jasper » Httpdx » Version: 1.4.5
cpe:2.3:a:jasper:httpdx:1.4.5:*:*:*:*:*:*:*
Matching versions
Jasper » Httpdx » Version: 1.4.6
cpe:2.3:a:jasper:httpdx:1.4.6:*:*:*:*:*:*:*
Matching versions
Jasper » Httpdx » Version: 1.5
cpe:2.3:a:jasper:httpdx:1.5:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2009-4770

EPSS FAQ

0.75%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 81 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-4770

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2009-4770

CWE-255

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-4770

http://www.metasploit.com/redmine/projects/framework/repository/revisions/7569/entry/modules/exploits/windows/ftp/httpdx_tolog_format.rb

Exploit

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2009-4770

Products affected by CVE-2009-4770

Exploit prediction scoring system (EPSS) score for CVE-2009-4770

CVSS scores for CVE-2009-4770

CWE ids for CVE-2009-4770

References for CVE-2009-4770