PT-2004-2514 · Sage · Saleslogix

Carl Livitt · Publicado 2004-10-18 · Atualizado 2017-07-11 · CVE-2004-1606

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions SalesLogix version 6.1

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via an invalid HTTP request. This might also lead to the leakage of sensitive information in the ErrorLogMsg cookie.

Recommendations For SalesLogix version 6.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-1606

Produtos afetados

Saleslogix

Referências · 8

• 🔥 http://secunia.com/advisories/12883 · Exploit
• 🔥 http://securityfocus.com/bid/11450 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17750 · Nota
• http://securitytracker.com/id?1011769 · Nota
• http://osvdb.org/10943 · Nota
• http://marc.info/?l=bugtraq&m=109811852218478&w=2 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1606 · Nota de Segurança