CVE-2005-2789 Information

Description

BFCommand & Control Server Manager BFCC 1.22_A and earlier and BFVCC 2.14_B and earlier allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.

Reference

http://aluigi.altervista.org/adv/bfccown-adv.txt http://marc.info/?l=bugtraq&m=112534155318828&w=2 http://secunia.com/advisories/16629/ http://www.securityfocus.com/bid/14690 https://exchange.xforce.ibmcloud.com/vulnerabilities/22055