CVEvulnerability
CVE-2004-2079
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user.
Affected configurations
• red-m red-alert 2.7.5 v3.1 build 24
References
- http://genhex.org/releases/031003.txt Vendor Advisory
- http://marc.info/?l=full-disclosure&m=107635119005407&w=2 marc.info
- http://securitytracker.com/id?1009001 Exploit, Patch, Vendor Advisory
- http://www.osvdb.org/3952 www.osvdb.org
- http://www.securiteam.com/securitynews/5SP0C0KC0A.html Vendor Advisory
- http://www.securityfocus.com/archive/1/353211 Vendor Advisory
- http://www.securityfocus.com/bid/9618 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15088 exchange.xforce.ibmcloud.com
- http://genhex.org/releases/031003.txt Vendor Advisory
- http://marc.info/?l=full-disclosure&m=107635119005407&w=2 marc.info
- http://securitytracker.com/id?1009001 Exploit, Patch, Vendor Advisory
- http://www.osvdb.org/3952 www.osvdb.org
- http://www.securiteam.com/securitynews/5SP0C0KC0A.html Vendor Advisory
- http://www.securityfocus.com/archive/1/353211 Vendor Advisory
- http://www.securityfocus.com/bid/9618 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15088 exchange.xforce.ibmcloud.com