PT-2004-2494 · Adobe · Flash Messaging Server

Luigi Auriemma · Published 2004-12-31 · Updated 2016-10-18 · CVE-2004-1586

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Flash Messaging Server version 5.2.0g (rev 1.1.2)

Description The issue allows remote attackers to stay connected by ignoring disconnecting commands such as "shutdown" from the server.

Recommendations For Flash Messaging Server version 5.2.0g (rev 1.1.2), consider implementing a workaround to enforce disconnections, as the current implementation can be bypassed. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2004-1586

Affected Products

Flash Messaging Server

References · 4

• 🔥 http://securitytracker.com/id?1011569 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1586 · Security Note
• http://secunia.com/advisories/12759 · Note
• http://marc.info/?l=bugtraq&m=109716787607302&w=2 · Note