CVE-2004-1611
- State
- Published
- Severity
- Not scored
- Published
- Feb 20, 2005
- Updated
- Aug 8, 2024
- Reserved
- Feb 20, 2005
Description
SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 12883third-party-advisory
- 20041018 Multiple vulnerabilities in Sage Saleslogixmailing-list
- 10948vdb-entry
- 10947vdb-entry
- 1011769vdb-entry
- 11450vdb-entry
- saleslogix-getconnection-account-disclosure(17754)vdb-entry
- 20041018 Multiple vulnerabilities in Sage Saleslogixmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.