CVE-2004-2079

Published: Feb 9, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user.

Affected (1)

Products: Red M: Red Alert

Red M

1 product

Red Alert

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Red M Red Alert	Version 2.7.5_v3.1_build_24

References (16)

http://genhex.org/releases/031003.txt

Source: cve@mitre.org

Vendor Advisory

http://marc.info/?l=full-disclosure&m=107635119005407&w=2

Source: cve@mitre.org

http://securitytracker.com/id?1009001

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://www.osvdb.org/3952

Source: cve@mitre.org

http://www.securiteam.com/securitynews/5SP0C0KC0A.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/353211

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/9618

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/15088

Source: cve@mitre.org

http://genhex.org/releases/031003.txt