CVE-2004-1608

Description

References

• archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html
• marc.info
• secunia.com/advisories/12883 · Patch
• securitytracker.com/id
• osvdb.org/10945
• securityfocus.com/bid/11450 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/17752

Weitere Schwachstellen in saleslogix

• CVE-2004-1612MITTEL 5.0Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFi…
• CVE-2004-1611MITTEL 5.1SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) …
• CVE-2004-1610HOCH 7.5SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary f…
• CVE-2004-1609MITTEL 5.0SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote a…
• CVE-2004-1607MITTEL 5.0slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an inv…