Lucene search
HistoryFeb 21, 2004 - 5:00 a.m.
CVE-2004-0466
cve-2004-0466
webconnect
denial of service
dos device name
nvd
7 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.026 Low
EPSS
Percentile
90.2%
WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openconnect:webconnect | openconnect webconnect | eq | 6.4.4 |
| openconnect:webconnect | openconnect webconnect | eq | 6.5 |
Related
cert
cert
OpenConnect Webconnect MS-DOS device name denial-of-service
2005-02-21 00:00:00
nessus
nessus
OpenConnect WebConnect < 6.5.1 Multiple Vulnerabilities
2005-02-24 00:00:00
securityvulns
securityvulns
7 High
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.026 Low
EPSS
Percentile
90.2%
Related for CVE-2004-0466