CVE-2003-1363

Published Dec 31, 2003

Last updated 16 years ago

Overview

Description: The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mount brute force attacks on the administration console without detection.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.4
Impact score: 4.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:aprelium_technologies:abyss_web_server:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5D18F091-C79E-4493-8D7C-79938C3784D2",
            "versionEndIncluding": "1.1.2"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References