Exploitation Summary
EIP tracks 2 public exploits for CVE-2003-0974. PoCs published by Bugtraq Security.
AI-analyzed exploit summary This exploit demonstrates an authentication bypass vulnerability in a system, allowing an attacker to add arbitrary IDS alerts and user accounts. It crafts a malicious packet with a specific ruleset and sends it over an SSL connection to the target host.
Description
Applied Watch Command Center allows remote attackers to conduct unauthorized activities without authentication, such as (1) add new users to a console, as demonstrated using appliedsnatch.c, or (2) add spurious IDS rules to sensors, as demonstrated using addrule.c.
Exploits (2)
This exploit demonstrates an authentication bypass vulnerability in a system, allowing an attacker to add arbitrary IDS alerts and user accounts. It crafts a malicious packet with a specific ruleset and sends it over an SSL connection to the target host.
This exploit demonstrates an authentication bypass vulnerability in an unspecified system, allowing an attacker to add arbitrary user accounts via a crafted SSL-encrypted packet. The PoC constructs a malicious packet with attacker-supplied credentials and sends it to the target server.