NVD

Id
87972  
Name
CVE-2017-2850  
Description
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in the FTP server. An attacker can simply send an HTTP request to the device to trigger this vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-06-29  
Modified Date
2017-07-05  
Seq
2017-2850  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
421948 87972 CVE-2017-8294 98072  View
421949 87972 CVE-2017-8294 https://github.com/VirusTotal/yara/commit/83d799804648c2a0895d40a19835d9b757c6fa4e  View
421950 87972 CVE-2017-8294 https://github.com/VirusTotal/yara/issues/646  View
421951 87972 CVE-2017-8294 98072  View
421952 87972 CVE-2017-8294 https://github.com/VirusTotal/yara/commit/83d799804648c2a0895d40a19835d9b757c6fa4e  View
421953 87972 CVE-2017-8294 https://github.com/VirusTotal/yara/issues/646  View
430278 87972 CVE-2017-0546 1038201  View
430279 87972 CVE-2017-0546 1038201  View

Related JVN