CVE-2004-0465

MEDIUM 5.0CVE-2004-0465 · Published 31/12/2004 · updated 16/06/2026

Package	Affected versions	Patched versions
webconnect openconnect	`= 6.4.4= 6.5`	No fix yet

Description

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCP_USER parameter.

References

marc.info
secunia.com/advisories/14006 · Patch
cirt.dk/advisories/cirt-29-advisory.pdf · Exploit
kb.cert.org/vuls/id/628411 · Third Party Advisory
kb.cert.org/vuls/id/JSHA-69HVPK · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/19394

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free