CVE

Id
10039  
CVE No.
CVE-2004-1611  
Status
Candidate  
Description
SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707.  
Phase
Assigned (20050220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
68834 10039 CVE-2004-1611 BUGTRAQ:20041018 Multiple vulnerabilities in Sage Saleslogix  View
68835 10039 CVE-2004-1611 URL:http://marc.info/?l=bugtraq&m=109811852218478&w=2  View
68836 10039 CVE-2004-1611 FULLDISC:20041018 Multiple vulnerabilities in Sage Saleslogix  View
68837 10039 CVE-2004-1611 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html  View
68838 10039 CVE-2004-1611 BID:11450  View
68839 10039 CVE-2004-1611 URL:http://www.securityfocus.com/bid/11450  View
68840 10039 CVE-2004-1611 OSVDB:10947  View
68841 10039 CVE-2004-1611 URL:http://www.osvdb.org/10947  View
68842 10039 CVE-2004-1611 OSVDB:10948  View
68843 10039 CVE-2004-1611 URL:http://www.osvdb.org/10948  View
68844 10039 CVE-2004-1611 SECTRACK:1011769  View
68845 10039 CVE-2004-1611 URL:http://securitytracker.com/id?1011769  View
68846 10039 CVE-2004-1611 SECUNIA:12883  View
68847 10039 CVE-2004-1611 URL:http://secunia.com/advisories/12883  View
68848 10039 CVE-2004-1611 XF:saleslogix-getconnection-account-disclosure(17754)  View

Related JVN