Vulnerability Description
The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mount brute force attacks on the administration console without detection.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Aprelium Technologies | Abyss Web Server | <= 1.1.2 |
References
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0149.html
- http://www.iss.net/security_center/static/11310.php
- http://www.securityfocus.com/bid/6842
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0149.html
- http://www.iss.net/security_center/static/11310.php
- http://www.securityfocus.com/bid/6842
FAQ
What is CVE-2003-1363?
CVE-2003-1363 is a vulnerability with a CVSS score of 6.4 (MEDIUM). The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port (9999), which allows remote attackers to mou...
How severe is CVE-2003-1363?
CVE-2003-1363 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2003-1363?
Check the references section above for vendor advisories and patch information. Affected products include: Aprelium Technologies Abyss Web Server.