Visionsoft Audit 12.4.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:visionsoft:audit:12.4.0.0:*:*:*:*:*:*:*part: a version: 12.4.0.0 update: *
| Vendor | Visionsoft (1b4f194f-bd17-50c7-a016-26ee0536a0f8) |
|---|---|
| Product | Audit (aba9b460-6753-55f1-b638-9848e9d37360) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-4152 |
vulnerable | 2026-06-08 04:49:55.826796 |
Details available
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing and resending data from the DETAILS and PROCESS sections of a session that schedules an audit.
Published: 2007-08-03T20:00:00.000Z
Updated: 2024-08-07T14:46:39.361Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4151 |
vulnerable | 2026-06-08 04:49:55.826512 |
Details available
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to obtain sensitive information via (1) a LOG.ON command, which reveals the logging pathname in the server response; (2) a VER command, which reveals the version number in the server response; and (3) a connection, which reveals the version number in the banner.
Published: 2007-08-03T20:00:00.000Z
Updated: 2024-08-07T14:46:39.353Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4150 |
vulnerable | 2026-06-08 04:49:55.826181 |
Details available
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, which allows remote attackers to obtain sensitive information by sniffing the network; and (2) storing passwords in the configuration file, which allows local users to obtain sensitive information by reading this file.
Published: 2007-08-03T20:00:00.000Z
Updated: 2024-12-04T15:31:04.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4149 |
vulnerable | 2026-06-08 04:49:55.825598 |
Details available
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 does not require authentication for (1) the "LOG." command, which allows remote attackers to create or overwrite arbitrary files; (2) the SETTINGSFILE command, which allows remote attackers to overwrite the ini file, and reconfigure VSAOD or cause a denial of service; or (3) the UNINSTALL command, which allows remote attackers to cause a denial of service (daemon shutdown). NOTE: vector 1 can be leveraged for code execution by writing to a Startup folder.
Published: 2007-08-03T20:00:00.000Z
Updated: 2024-08-07T14:46:39.343Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4148 |
vulnerable | 2026-06-08 04:49:55.825170 |
Details available
Heap-based buffer overflow in the Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to cause a denial of service (persistent daemon crashes) or execute arbitrary code via a long filename in a "LOG." command.
Published: 2007-08-03T20:00:00.000Z
Updated: 2024-08-07T14:46:39.344Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.