CVEvulnerability
CVE-2007-6638
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz.
Affected configurations
• march networks 3204 dvr
Related
Weakness · not in database (1)
References
- http://osvdb.org/39726 osvdb.org
- http://secunia.com/advisories/28211 Vendor Advisory
- http://www.milw0rm.com/papers/190 www.milw0rm.com
- http://www.securityfocus.com/bid/27054 Exploit
- http://www.sybsecurity.com/advisors/SYBSEC-ADV14-March_Networks_DVR_3204_Logfile_Information_Disclosure www.sybsecurity.com
- http://www.sybsecurity.com/pages/advisors/static/dvr3204_exp.txt www.sybsecurity.com
- http://www.sybsecurity.com/resources/static/An_Insecurity_Overview_of_the_March_Networks_DVR-CCTV_3204.pdf www.sybsecurity.com
- https://www.exploit-db.com/exploits/4797 www.exploit-db.com
- http://osvdb.org/39726 osvdb.org
- http://secunia.com/advisories/28211 Vendor Advisory
- http://www.milw0rm.com/papers/190 www.milw0rm.com
- http://www.securityfocus.com/bid/27054 Exploit
- http://www.sybsecurity.com/advisors/SYBSEC-ADV14-March_Networks_DVR_3204_Logfile_Information_Disclosure www.sybsecurity.com
- http://www.sybsecurity.com/pages/advisors/static/dvr3204_exp.txt www.sybsecurity.com
- http://www.sybsecurity.com/resources/static/An_Insecurity_Overview_of_the_March_Networks_DVR-CCTV_3204.pdf www.sybsecurity.com
- https://www.exploit-db.com/exploits/4797 www.exploit-db.com