CVE-2004-0204: High severity Bea WebLogic Server vulnerability
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0204?
CVE-2004-0204 is rated as a critical severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2004-0204?
To fix CVE-2004-0204, update to the latest patched version of the affected software from the vendor.
What products are affected by CVE-2004-0204?
CVE-2004-0204 affects Business Objects Crystal Reports versions 9 and 10, Crystal Enterprise versions 9 and 10, and other related applications.
What type of vulnerability is CVE-2004-0204?
CVE-2004-0204 is a directory traversal vulnerability that allows remote attackers to access restricted files.
Can CVE-2004-0204 be exploited by an unauthenticated user?
Yes, CVE-2004-0204 can be exploited by unauthenticated remote attackers to gain unauthorized access to sensitive files.