Vulnerability Details CVE-2004-1606
slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 82.0%
CVSS Severity
CVSS v2 Score 6.4
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html
- http://marc.info/?l=bugtraq&m=109811852218478&w=2
- http://secunia.com/advisories/12883
- http://securitytracker.com/id?1011769
- http://www.osvdb.org/10943
- http://www.securityfocus.com/bid/11450
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17750
- http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html
- http://marc.info/?l=bugtraq&m=109811852218478&w=2
- http://secunia.com/advisories/12883
- http://securitytracker.com/id?1011769
- http://www.osvdb.org/10943
- http://www.securityfocus.com/bid/11450
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17750
Products affected by CVE-2004-1606
-
cpe:2.3:a:best_software:saleslogix:*
-
cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0