CVE-2005-2789 BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a us...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bfcommand and control software bfcc | <= 1.22_a | No fix listed |
| bfcommand and control software bfvcc | = 2.00_a | No fix listed |
| bfcommand and control software bfvcc | = 2.14_b | No fix listed |
References
- aluigi.altervista.org exploit vendor-advisory
- 20050829 Multiple vulnerabilities in BFCommand & Control for Battlefield mailing-list
- 16629 third-party-advisory vendor-advisory
- 14690 exploit vdb-entry
- bfcommand-bypass-authentication(22055) vdb-entry