CVE-2005-0744
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Novell iChain 2.2和2.3 SP2和SP3版本的web GUI 使得攻击者可以通过(1)窥测端口51100上的TCP连接并重播认证信息或者(2)从浏览器上获取并重播PCZQX02认证cookie，劫持会话并获取管理员权限。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2005-0744
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing the connection on TCP port 51100 and replaying the authentication information or (2) obtaining and replaying the PCZQX02 authentication cookie from the browser.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Novell iChain漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Novell iChain 2.2和2.3 SP2和SP3版本的web GUI 使得攻击者可以通过(1)窥测端口51100上的TCP连接并重播认证信息或者(2)从浏览器上获取并重播PCZQX02认证cookie，劫持会话并获取管理员权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2005-0744
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2005-0744
请登录查看更多情报信息。
Vendor Advisories for CVE-2005-0744 (3)
Same Patch Batch · n/a · 2005-03-13 · 30 CVEs total
| CVE-2005-0733 | PY Software Active Webcam WebServer 漏洞 | |
| CVE-2005-0748 | WEBInsta Mailing list manager 'initdb.php'远程文件包含漏洞 | |
| CVE-2005-0747 | ApplyYourself i-Class 敏感信息泄露漏洞 | |
| CVE-2005-0746 | Novell iChain Mini FTP Server非授权远程路径泄漏漏洞 | |
| CVE-2005-0745 | UTStarcom iAN-02EX VoIP Analog Terminal Adaptor 访问限制绕过漏洞 | |
| CVE-2005-0743 | Xoops Custom Avatar远程任意PHP文件上传漏洞 | |
| CVE-2005-0742 | Sun Java System Application Server未明跨站脚本漏洞 | |
| CVE-2005-0741 | YaBB 跨站脚本攻击漏洞 | |
| CVE-2005-0740 | OpenBSD tcp_input.c 拒绝服务漏洞 | |
| CVE-2005-0739 | Ethereal IAPP解析器缓冲区溢出漏洞 | |
| CVE-2005-0738 | Microsoft Exchange Server 2003栈损耗漏洞 | |
| CVE-2005-0737 | Yahoo! Messenger远程缓冲区溢出漏洞 | |
| CVE-2005-0736 | Linux内核 整数溢出漏洞 | |
| CVE-2005-0735 | NewsScript访问验证漏洞 | |
| CVE-2005-0734 | PY Software Active Webcam WebServer 拒绝服务漏洞 | |
| CVE-2002-1591 | AOL Instant Messenger (AIM)漏洞 | |
| CVE-2005-0732 | PY Software Active Webcam WebServer漏洞 | |
| CVE-2005-0731 | PY Software Active Webcam WebServer 'Filelist.html'拒绝服务攻击漏洞 | |
| CVE-2005-0730 | PY Software Active Webcam WebServer拒绝服务漏洞 | |
| CVE-2005-0729 | Xpand Rally 格式化字符串漏洞 |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2005-0744
No comments yet