CVEブラウザに戻る

CVE-2005-1558

HIGH

7.5

CVSS Severity Score

EPSS Score0.0630%

EPSS Percentile44.02th

Published2005年5月11日

Last Modified2026年4月16日

Vulnerability Description

The web module in Neteyes Nexusway allows remote attackers to bypass authentication and gain administrator privileges by setting the cyclone500_auth cookie.

Affected Platforms (CPE)

📦

Neteyes

Nexusway

= 805

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0225.html

🔗 http://marc.info/?l=bugtraq&m=111585017832066&w=2

🔗 http://secunia.com/advisories/15150

🔗 http://www.osvdb.org/16446

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/20554

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0225.html

🔗 http://marc.info/?l=bugtraq&m=111585017832066&w=2

🔗 http://secunia.com/advisories/15150

関連する脆弱性情報

CVE-2005-155910.0

The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in t...

CVE-2005-156010.0

The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to ...

CVE-2005-103710.0

Unknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.

CVE-2005-051910.0

ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (...