PT-2004-2514 · Sage · Saleslogix

Carl Livitt · Published 2004-10-18 · Updated 2017-07-11 · CVE-2004-1606

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions SalesLogix version 6.1

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via an invalid HTTP request. This might also lead to the leakage of sensitive information in the ErrorLogMsg cookie.

Recommendations For SalesLogix version 6.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-1606

Affected Products

Saleslogix

References · 8

• 🔥 http://secunia.com/advisories/12883 · Exploit
• 🔥 http://securityfocus.com/bid/11450 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1606 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17750 · Note
• http://securitytracker.com/id?1011769 · Note
• http://osvdb.org/10943 · Note
• http://marc.info/?l=bugtraq&m=109811852218478&w=2 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html · Note