CVE-2004-0466 WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1,...
MediumCVSS 5.0
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openconnect webconnect | = 6.4.4 | No fix listed |
| openconnect webconnect | = 6.5 | No fix listed |
References
- 20050220 The WebConnect 6.4.4 and 6.5 contains several vulnerabilities mailing-list
- 14006 patch third-party-advisory vendor-advisory
- www.cirt.dk vendor-advisory
- VU#552561 patch third-party-advisory us-government-resource
- www.kb.cert.org patch third-party-advisory us-government-resource
- webconnect-device-name-dos(19393) vdb-entry