CVE-2004-0337: XSS
Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / (slash) and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be REJECTed in the future.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0337?
CVE-2004-0337 is classified as a cross-site scripting (XSS) vulnerability which can enable remote attackers to execute arbitrary scripts in the context of a user's session.
How do I fix CVE-2004-0337?
To remediate CVE-2004-0337, it is recommended to upgrade LAN SUITE Web Mail to a version that addresses this XSS vulnerability, if available.
What software versions are affected by CVE-2004-0337?
CVE-2004-0337 affects versions 2002 and 2003 of Software602 602Pro LAN Suite.
Can CVE-2004-0337 be exploited without authentication?
Yes, CVE-2004-0337 can be exploited remotely and does not require authentication, making it a critical risk for users.
Is there a vendor patch for CVE-2004-0337?
According to the vendor, no reproducible patch has been provided for CVE-2004-0337, so it is advised to seek alternative security measures.