Lucene search

MitreCVE-2004-2440

HistoryAug 20, 2005 - 4:00 a.m.

CVE-2004-2440

2005-08-2004:00:00

mitre

web.nvd.nist.gov

cve-2004-2440

cmdline.c

proxytunnel

vulnerability

local users

proxy credentials.

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.

Affected configurations

Nvd

Node

proxytunnelproxytunnelMatch1.0.6

proxytunnelproxytunnelMatch1.1.3

VendorProductVersionCPE
proxytunnelproxytunnel1.0.6cpe:2.3:a:proxytunnel:proxytunnel:1.0.6:*:*:*:*:*:*:*
proxytunnelproxytunnel1.1.3cpe:2.3:a:proxytunnel:proxytunnel:1.1.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
proxytunnel	proxytunnel	1.0.6	cpe:2.3:a:proxytunnel:proxytunnel:1.0.6:::::::*
proxytunnel	proxytunnel	1.1.3	cpe:2.3:a:proxytunnel:proxytunnel:1.1.3:::::::*

References

secunia.com/advisories/12685/

securitytracker.com/id?1011486

sourceforge.net/project/shownotes.php?release_id=271699

www.securityfocus.com/bid/11299

exchange.xforce.ibmcloud.com/vulnerabilities/17566

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2004-2440