Lucene search

[email protected]CVE-2004-0698

HistoryJul 27, 2004 - 4:00 a.m.

CVE-2004-0698

2004-07-2704:00:00

[email protected]

web.nvd.nist.gov

cve-2004-0698

4d webstar

symlink attack

file modification

nvd

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.

Affected configurations

NVD

Node

4dwebstarMatch4.0

4dwebstarMatch5.2

4dwebstarMatch5.2.1

4dwebstarMatch5.2.2

4dwebstarMatch5.2.3

4dwebstarMatch5.2.4

4dwebstarMatch5.3

4dwebstarMatch5.3.1

4dwebstarMatch5.3.2

CPENameOperatorVersion
4d:webstar4d webstareq4.0
4d:webstar4d webstareq5.2
4d:webstar4d webstareq5.2.1
4d:webstar4d webstareq5.2.2
4d:webstar4d webstareq5.2.3
4d:webstar4d webstareq5.2.4
4d:webstar4d webstareq5.3
4d:webstar4d webstareq5.3.1
4d:webstar4d webstareq5.3.2

CPE	Name	Operator	Version
4d:webstar	4d webstar	eq	4.0
4d:webstar	4d webstar	eq	5.2
4d:webstar	4d webstar	eq	5.2.1
4d:webstar	4d webstar	eq	5.2.2
4d:webstar	4d webstar	eq	5.2.3
4d:webstar	4d webstar	eq	5.2.4
4d:webstar	4d webstar	eq	5.3
4d:webstar	4d webstar	eq	5.3.1
4d:webstar	4d webstar	eq	5.3.2

References

ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt

www.atstake.com/research/advisories/2004/a071304-1.txt

exchange.xforce.ibmcloud.com/vulnerabilities/16689

3.6 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2004-0698

cvelist1 openvas2 nessus1 nvd1