CVE-2005-2789

BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.

Published: Sep 3, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-2789
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
bfcommand_and_control_software / bfvcc	2.00_a	2.00_a.x
bfcommand_and_control_software / bfcc	-	1.22_a.x
bfcommand_and_control_software / bfvcc	2.14_b	2.14_b.x

http://aluigi.altervista.org/adv/bfccown-adv.txt
http://marc.info/?l=bugtraq&m=112534155318828&w=2
http://secunia.com/advisories/16629/
http://www.securityfocus.com/bid/14690
https://exchange.xforce.ibmcloud.com/vulnerabilities/22055

Vulnerability Database

289,782

CVE-2005-2789