CVE-2007-0829
avast! Server Edition before 4.7.726 does not demand a password in a certain intended context, even when a password has been set, which allows local users to bypass authentication requirements.
- Score
- CVSS 2.0 4.4 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2007-02-07
- Last modified
- 2024-08-07
Affected products
References
- http://osvdb.org/33114
- http://secunia.com/advisories/24068
- http://www.avast.com/eng/avast-4-server-revision-history.html
- http://www.securityfocus.com/bid/22425
- http://www.vupen.com/english/advisories/2007/0499
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32269
