Secunia

Tirath Rai has reported a security issue in GeoVision Digital Video Surveillance System, which can be exploited by malicious people to disclose sensitive information.

The problem is that images can be accessed directly via the JPEG Image Viewer. This can be exploited to disclose images from e.g. security cameras without supplying a password.

Successful exploitation requires that the system is configured to create JPEG images.

The security issue has been reported in versions 6.04, 6.1, and 7.0. Other versions may also be affected.

Solution
Enable the "Enhanced Network Security" feature introduced in version 7.0 (not enabled per default).

Provided and/or discovered by
Tirath Rai, Esqo.

Changelog
Further details available in Customer Area

Original Advisory
http://www.esqo.com/research/advisories/2005/100505-1.txt

Deep Links
Links available in Customer Area