CVEs-PoC/2005/CVE-2005-2789.md

CVE-2005-2789

Description

BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.

POC

Reference

• http://aluigi.altervista.org/adv/bfccown-adv.txt
• http://marc.info/?l=bugtraq&m=112534155318828&w=2

Github

No PoCs found on GitHub currently.