CVE-2005-1552 GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote....
MediumCVSS 5.0
EPSS 3.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GeoVision Inc. digital surveillance system | = 6.0.4 | No fix listed |
| GeoVision Inc. digital surveillance system | = 6.1 | No fix listed |
| GeoVision Inc. digital surveillance system | = 7.0 | No fix listed |
References
- 20050510 Esqo advisory: GeoVision Digital Video Surveillance System - Multiple authentication issues mailing-list
- 15330 third-party-advisory
- www.esqo.com exploit vendor-advisory
- 16340 vdb-entry
- 13571 exploit vdb-entry
- geovision-authentication(20537) vdb-entry