CVE-2004-2254

ALTO 7.5CVE-2004-2254 · Published 31/12/2004 · updated 16/06/2026

In breve

CVE-2004-2254 è una vulnerabilità ALTO (CVSS 7.5) che riguarda surgeldap (netwin).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 8.4%, superiore al 95.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
surgeldap netwin	`= 1.0a= 1.0b= 1.0d= 1.0e= 1.0f= 1.0g`	No fix yet

Description

SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.

References

netwinsite.com/surgeldap/updates.htm · Patch
secunia.com/advisories/11549 · Exploit
securitytracker.com/alerts/2004/May/1010113.html · Exploit
securitytracker.com/id · Exploit
osvdb.org/5890 · Exploit
securityfocus.com/bid/10294 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/16076

Altre vulnerabilità di surgeldap

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free