Lucene search

[email protected]CVE-2004-0324

HistoryFeb 23, 2004 - 5:00 a.m.

CVE-2004-0324

2004-02-2305:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

2004

0324

remote code execution

email headers

security vulnerability

nvd

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.3%

JSON

Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.

CPENameOperatorVersion
confirm:confirmconfirmeq0.50
confirm:confirmconfirmeq0.55
confirm:confirmconfirmeq0.52
confirm:confirmconfirmeq0.60
confirm:confirmconfirmeq0.54
confirm:confirmconfirmeq0.61
confirm:confirmconfirmeq0.53
confirm:confirmconfirmeq0.51
confirm:confirmconfirmeq0.62

CPE	Name	Operator	Version
confirm:confirm	confirm	eq	0.50
confirm:confirm	confirm	eq	0.55
confirm:confirm	confirm	eq	0.52
confirm:confirm	confirm	eq	0.60
confirm:confirm	confirm	eq	0.54
confirm:confirm	confirm	eq	0.61
confirm:confirm	confirm	eq	0.53
confirm:confirm	confirm	eq	0.51
confirm:confirm	confirm	eq	0.62

References

marc.info/?l=bugtraq&m=107757320401858&w=2

www.securityfocus.com/bid/9728

exchange.xforce.ibmcloud.com/vulnerabilities/15290

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.027 Low

EPSS

Percentile

90.3%

JSON