返回 CVE 瀏覽器

CVE-2005-1558

HIGH

7.5

CVSS Severity Score

EPSS Score0.0630%

EPSS Percentile44.02th

Published2005年5月11日

Last Modified2026年4月16日

Vulnerability Description

The web module in Neteyes Nexusway allows remote attackers to bypass authentication and gain administrator privileges by setting the cyclone500_auth cookie.

Affected Platforms (CPE)

📦

Neteyes

Nexusway

= 805

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0225.html

🔗 http://marc.info/?l=bugtraq&m=111585017832066&w=2

🔗 http://secunia.com/advisories/15150

🔗 http://www.osvdb.org/16446

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/20554

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0225.html

🔗 http://marc.info/?l=bugtraq&m=111585017832066&w=2

🔗 http://secunia.com/advisories/15150

相關漏洞威脅

CVE-2005-155910.0

The web module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via hex-encoded shell metacharacters in t...

CVE-2005-156010.0

The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to ...

CVE-2005-044110.0

Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticat...

CVE-2005-051910.0

ArGoSoft FTP Server before 1.4.2.7 allows remote attackers to read arbitrary files by uploading a ZIP file containing a shortcut (...