CVE-2004-0798: Buffer Overflow
Published Aug 27, 2004
·Updated
Buffer overflow in the maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter.
Affected Software
12 affected components
Progress WhatsUp Gold=7.0
Progress WhatsUp Gold=7.03
Progress WhatsUp Gold=7.04
Progress WhatsUp Gold=8.0
Progress WhatsUp Gold=8.01
Progress WhatsUp Gold=8.03
Ipswitch WhatsUp Gold=8.0
Ipswitch WhatsUp Gold=8.03
Ipswitch WhatsUp Gold=7.03
Ipswitch WhatsUp Gold=8.01
Ipswitch WhatsUp Gold=7.04
Ipswitch WhatsUp Gold=7.0
Event History
Aug 27, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0798?
CVE-2004-0798 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2004-0798?
To fix CVE-2004-0798, upgrade to Ipswitch WhatsUp Gold version 8.03 Hotfix 1 or later.
3
What software versions are affected by CVE-2004-0798?
CVE-2004-0798 affects multiple versions of Ipswitch WhatsUp Gold, including 7.0, 7.03, 7.04, 8.0, 8.01, and 8.03.
4
Can CVE-2004-0798 be exploited remotely?
Yes, CVE-2004-0798 can be exploited remotely through a crafted request to the vulnerable script.
5
What is the nature of the vulnerability in CVE-2004-0798?
CVE-2004-0798 is a buffer overflow vulnerability that allows attackers to execute arbitrary code.