CVE-2004-2079

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-02-09 · updated 2026-06-16

Description

Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user.

Affected products

Red-M Red-Alert: 2.7.5_v3.1_build_24

References

http://genhex.org/releases/031003.txt
http://marc.info/?l=full-disclosure&m=107635119005407&w=2
http://securitytracker.com/id?1009001
http://www.osvdb.org/3952
http://www.securiteam.com/securitynews/5SP0C0KC0A.html
http://www.securityfocus.com/archive/1/353211
http://www.securityfocus.com/bid/9618
https://exchange.xforce.ibmcloud.com/vulnerabilities/15088
http://genhex.org/releases/031003.txt
http://marc.info/?l=full-disclosure&m=107635119005407&w=2
http://securitytracker.com/id?1009001
http://www.osvdb.org/3952

Get alerted when CVE-2004-2079 or the next vulnerability affects your stack