Lucene search

[email protected]CVE-2004-2512

HistoryOct 25, 2005 - 4:00 a.m.

CVE-2004-2512

2005-10-2504:00:00

[email protected]

web.nvd.nist.gov

cve-2004-2512

crlf injection

calendar.php

dcp-portal

security vulnerability

http response splitting

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.6%

JSON

CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF (“%0d%0a”) sequences in the PHPSESSID parameter.

Affected configurations

NVD

Node

codeworx_technologiesdcp-portalRange≤5.3.2

codeworx_technologiesdcp-portalMatch3.7

codeworx_technologiesdcp-portalMatch4.0

codeworx_technologiesdcp-portalMatch4.1

codeworx_technologiesdcp-portalMatch4.2

codeworx_technologiesdcp-portalMatch4.5.1

codeworx_technologiesdcp-portalMatch5.0.1

codeworx_technologiesdcp-portalMatch5.0.2

codeworx_technologiesdcp-portalMatch5.1

codeworx_technologiesdcp-portalMatch5.2

codeworx_technologiesdcp-portalMatch5.3

codeworx_technologiesdcp-portalMatch5.3.1

CPENameOperatorVersion
codeworx_technologies:dcp-portalcodeworx technologies dcp-portalle5.3.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq3.7
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.0
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq4.5.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.0.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.0.2
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.1
codeworx_technologies:dcp-portalcodeworx technologies dcp-portaleq5.2

CPE	Name	Operator	Version
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	le	5.3.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	3.7
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.0
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	4.5.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.0.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.0.2
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.1
codeworx_technologies:dcp-portal	codeworx technologies dcp-portal	eq	5.2

Rows per page:

1-10 of 121

References

archives.neohapsis.com/archives/bugtraq/2004-10/0042.html

secunia.com/advisories/12751

securitytracker.com/id?1011481

www.osvdb.org/10591

www.securityfocus.com/bid/11340

exchange.xforce.ibmcloud.com/vulnerabilities/17640

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.9 Medium

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.6%

JSON

Related for CVE-2004-2512

nvd1 cvelist1 nessus1 openvas1