PT-2004-3433 · Epixtech · Dynix Webpac

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2542

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Dynix (formerly known as epixtech) WebPAC (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands, potentially enabling them to execute stored procedures, bypass login authentication, and cause a denial of service to backend databases.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-2542

Affected Products

Dynix Webpac

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-2542 · Security Note
• http://securityfocus.com/bid/11037 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17128 · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-08/0354.html · Note
• http://securitytracker.com/id?1011073 · Note
• http://osvdb.org/9274 · Note