NVD

Id
83238  
Name
CVE-2017-5674  
Description
A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera models allows an attacker to craft a malformed HTTP (GET system.ini HTTP/1.1 - note the lack of / in the path field of the request) request that will disclose the configuration file with the login password.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-03-18  
Published
2017-03-13  
Modified Date
2017-03-15  
Seq
2017-5674  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408056 83238 CVE-2016-7288 http://packetstormsecurity.com/files/140994/Microsoft-Edge-TypedArray.sort-Use-After-Free.html  View
408057 83238 CVE-2016-7288 https://bugs.chromium.org/p/project-zero/issues/detail?id=983  View
409085 83238 CVE-2016-4492 [oss-security] 20160505 Re: CVE Request: No Demangling During Analysis of Untrusted Binaries  View
409086 83238 CVE-2016-4492 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70926  View
409087 83238 CVE-2016-4492 [gcc-patches] 20160503 Fix for PR70926 in Libiberty Demangler (5)  View
409088 83238 CVE-2016-4492 [oss-security] 20160505 Re: CVE Request: No Demangling During Analysis of Untrusted Binaries  View
409089 83238 CVE-2016-4492 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70926  View
409090 83238 CVE-2016-4492 [gcc-patches] 20160503 Fix for PR70926 in Libiberty Demangler (5)  View
411310 83238 CVE-2017-1150 http://www.ibm.com/support/docview.wss?uid=swg21999515  View
411311 83238 CVE-2017-1150 96597  View
411312 83238 CVE-2017-1150 http://www.ibm.com/support/docview.wss?uid=swg21999515  View
411313 83238 CVE-2017-1150 96597  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65902 JVNDB-2017-002241 Foscam などのホワイトラベルの IP カメラモデルで使用されるカスタムビルドされた GoAhead Web サーバにおける設定ファイルを公開される脆弱性 Foscam、Vstarcam、および複数のホワイトラベルの IP カメラモデルで使用されるカスタムビルドの GoAhead Web サーバには、ログインパスワードで設定ファイルを公開される脆弱性が存在します。 CVE-2017-5674 CVE-2017-5674 83238 5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002241.html 2017-03-13 2017-04-06 View