CVE-2009-4657

The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the…

published March 3, 2010

CVSS
—
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the application on port 32123, as demonstrated by setting the action option to wizardStep1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02151 · 82.0th percentile
Published
2010-03-03T20:00Z
EPSS history
Timeline
  • 03 MAR 20:00Z
    The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the…
    cvelistv5