CVE

Id
27144  
CVE No.
CVE-2007-3787  
Status
Candidate  
Description
The eSoft InstaGate EX2 UTM device does not require entry of the old password when changing the admin password, which might allow remote attackers to gain privileges by conducting a CSRF attack, making a password change from an unattended workstation, or other attacks.  
Phase
Assigned (20070715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277927 27144 CVE-2007-3787 BUGTRAQ:20070711 Calyptix Security Advisory CX-2007-05 - eSoft InstaGate EX2 Cross-Site Request Forgery Attack  View
277928 27144 CVE-2007-3787 URL:http://www.securityfocus.com/archive/1/archive/1/473663/100/0/threaded  View
277929 27144 CVE-2007-3787 MISC:http://labs.calyptix.com/CX-2007-05.php  View
277930 27144 CVE-2007-3787 MISC:http://labs.calyptix.com/CX-2007-05.txt  View
277931 27144 CVE-2007-3787 OSVDB:38175  View
277932 27144 CVE-2007-3787 URL:http://osvdb.org/38175  View
277933 27144 CVE-2007-3787 SECUNIA:26005  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55428 JVNDB-2007-004120 Inmostore の admin/index.php における SQL インジェクションの脆弱性 Inmostore の admin/index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-3789 27144 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004120.html  View