CVE-2010-2271 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

Format string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path (aka Password File) parameter.

CVSS Score

7.5

HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Accoria	Rock Web Server	1.4.7

Related Weaknesses (CWE)

CWE-134

References

http://www.ioactive.com/pdfs/AccoriaWebServer.pdfExploit
http://www.kb.cert.org/vuls/id/245081US Government Resource
http://www.ioactive.com/pdfs/AccoriaWebServer.pdfExploit
http://www.kb.cert.org/vuls/id/245081US Government Resource

FAQ

What is CVE-2010-2271?

CVE-2010-2271 is a vulnerability with a CVSS score of 7.5 (HIGH). Format string vulnerability in authcfg.cgi in Accoria Web Server (aka Rock Web Server) 1.4.7 allows remote attackers to have an unspecified impact via format string specifiers in the path (aka Passwor...

How severe is CVE-2010-2271?

CVE-2010-2271 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-2271?

Check the references section above for vendor advisories and patch information. Affected products include: Accoria Rock Web Server.