CVE-2004-0204
N/A
N/A
Summary
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://marc.info/?l=bugtraq&m=108360413811017&w=2
- http://support.businessobjects.com/fix/hot/critical/bulletins/security_bulletin_june04.asp
- http://secunia.com/advisories/11800
- http://marc.info/?l=bugtraq&m=108671836127360&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16044
- http://www.osvdb.org/6748
- http://www.securityfocus.com/bid/10260
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1157
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-017
References
- http://marc.info/?l=bugtraq&m=108360413811017&w=2
- http://support.businessobjects.com/fix/hot/critical/bulletins/security_bulletin_june04.asp
- http://secunia.com/advisories/11800
- http://marc.info/?l=bugtraq&m=108671836127360&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16044
- http://www.osvdb.org/6748
- http://www.securityfocus.com/bid/10260
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1157
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-017
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.