Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2007-6638

Published: 04/01/2008 Updated: 29/09/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to 3204 Dvr

Vulnerability Summary

March Networks DVR 3204 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to obtain usernames, passwords, device names, and IP addresses via a direct request for scripts/logfiles.tar.gz.

Vulnerable Product Search on Vulmon Subscribe to Product

march networks 3204 dvr

Exploits

Exploit DB: March Networks DVR 3204 - Logfile Information Disclosure
#!/usr/bin/perl # # March Networks DVR 3204 Logfile Information Disclosure Exploit # # Since configuration of the IP address, user console and root is # carried out over the "administrator console", the vulnerability # lies within Watchdog's HTTP server application # # Any user can obtain the log files without authentication by accessing # the f ...

Github Repositories

https://github.com/alt3kx/CVE-2007-6638

March Networks DVR 3204 - Logfile Information Disclosure

CVE-2007-6638 March Networks DVR 3204 - Logfile Information Disclosure Exploit-DB publication at wwwexploit-dbcom/exploits/4797/ Author Alex Hernandez aka (@_alt3kx_)

References

CWE-264http://www.milw0rm.com/papers/190http://www.sybsecurity.com/advisors/SYBSEC-ADV14-March_Networks_DVR_3204_Logfile_Information_Disclosurehttp://www.sybsecurity.com/pages/advisors/static/dvr3204_exp.txthttp://www.sybsecurity.com/resources/static/An_Insecurity_Overview_of_the_March_Networks_DVR-CCTV_3204.pdfhttp://www.securityfocus.com/bid/27054http://secunia.com/advisories/28211http://osvdb.org/39726https://www.exploit-db.com/exploits/4797https://nvd.nist.govhttps://github.com/alt3kx/CVE-2007-6638https://www.exploit-db.com/exploits/4797/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
XXECVE-2024-34490SQL injectionCVE-2024-34488CVE-2024-4507CVE-2023-7028CVE-2024-23187TCPCVE-2024-4439
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook