Lucene search

MitreCVE-2004-0425

HistoryAug 18, 2004 - 4:00 a.m.

CVE-2004-0425

2004-08-1804:00:00

mitre

web.nvd.nist.gov

cve-2004-0425

siteminder

affiliate agent

buffer overflow

remote code execution

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.035

Percentile

91.5%

JSON

Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.

Affected configurations

Nvd

Node

netegritysideminder_affiliate_agentMatch4.0

VendorProductVersionCPE
netegritysideminder_affiliate_agent4.0cpe:2.3:a:netegrity:sideminder_affiliate_agent:4.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
netegrity	sideminder_affiliate_agent	4.0	cpe:2.3:a:netegrity:sideminder_affiliate_agent:4.0:::::::*

References

www.atstake.com/research/advisories/2004/a042204-1.txt

www.securityfocus.com/bid/10198

exchange.xforce.ibmcloud.com/vulnerabilities/15950

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

High

EPSS

0.035

Percentile

91.5%

JSON

Related for CVE-2004-0425