PT-2004-3433 · Epixtech · Dynix Webpac

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2542

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dynix (formerly known as epixtech) WebPAC (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands, potentially enabling them to execute stored procedures, bypass login authentication, and cause a denial of service to backend databases.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2004-2542

Produtos afetados

Dynix Webpac

Referências · 6

• http://securityfocus.com/bid/11037 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17128 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2542 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2004-08/0354.html · Nota
• http://securitytracker.com/id?1011073 · Nota
• http://osvdb.org/9274 · Nota