Description
BFCommand & Control Server Manager BFCC 1.22_A and earlier, and BFVCC 2.14_B and earlier, allows remote attackers to bypass authentication via (1) an unknown attack vector or (2) a NULL (0x00) as a username.
References
- 14690 vdb-entry
- bfcommand-bypass-authentication(22055) vdb-entry
- http://aluigi.altervista.org/adv/bfccown-adv.txt
- 16629 third-party-advisory
- 20050829 Multiple vulnerabilities in BFCommand & Control for Battlefield mailing-list