NVD

Id
51774  
Name
CVE-2009-4657  
Description
The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the application on port 32123, as demonstrated by setting the action option to wizardStep1.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2010-03-03  
Modified Date
2010-03-04  
Seq
2009-4657  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
262272 51774 CVE-2009-4657 9717  View
262273 51774 CVE-2009-4657 36454  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38577 JVNDB-2010-004362 Xerver 用の管理者パッケージにおけるアプリケーション設定を変更される脆弱性 Xerver 用の管理者パッケージは、認証を必要としないため、アプリケーション設定を変更される脆弱性が存在します。 CVE-2009-4657 42088 CVE-2009-4657 51774 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004362.html 2010-03-03 2012-09-25 View