CVE-2005-2027

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/15757Patch, Vendor Advisory
http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdfPatch, Vendor Advisory
http://secunia.com/advisories/15757Patch, Vendor Advisory
http://www.enterasys.com/support/relnotes/VH-4802-2050509-patch-rel.pdfPatch, Vendor Advisory

Timeline

Published: Jun 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-20287.5SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via th CVE-2005-20297.5amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allow CVE-2005-20305.0Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the p CVE-2005-20317.5Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter to ar CVE-2005-20322.1Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files.CVE-2005-20335.0Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to read arbitrary file CVE-2005-20344.3Cross-site scripting (XSS) vulnerability in folderview.asp for BlueCollar iGallery 3.3 allows remote attackers to inject arbitrary web scrip CVE-2005-20357.5SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via CVE-2005-20367.5modifyUser.asp in Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modi CVE-2005-20377.5Multiple SQL injection vulnerabilities in Fortibus CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via (1) the username o CVE-2005-20385.0Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page.CVE-2005-20395.0Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands.