← Back

Omidrouhani

omidrouhani

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Xerver
xerver
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2009-4658
1Omidrouhani
1Xerver
Apr 29, 2026
Mar 3, 2010
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port assignment in the management interface. NOTE: this can be leveraged by non-authenticated attackers usi...Show more
Xerver 4.32 allows remote authenticated users to cause a denial of service (daemon crash) via a non-numeric web port assignment in the management interface. NOTE: this can be leveraged by non-authenticated attackers using CVE-2009-4657.Show less
CVE-2009-4657
1Omidrouhani
1Xerver
Apr 29, 2026
Mar 3, 2010
N/A· v4
N/A· v3
7.5 HIGH· v2
The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the application on port 32123, as demonstrated by setting the action...Show more
The administrator package for Xerver 4.32 does not require authentication, which allows remote attackers to alter application settings by connecting to the application on port 32123, as demonstrated by setting the action option to wizardStep1.Show less