CVE-2004-2079 | BDVDB-2026-10357 Detail
Description#
Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/archive/1/353211
- http://marc.info/?l=full-disclosure&m=107635119005407&w=2
- http://www.osvdb.org/3952
- http://securitytracker.com/id?1009001
- http://www.securityfocus.com/bid/9618
- http://www.securiteam.com/securitynews/5SP0C0KC0A.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15088
- http://genhex.org/releases/031003.txt
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.