CVE-2004-0799: Medium severity Ipswitch WhatsUp Gold vulnerability
Published Sep 17, 2004
·Updated
The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm".
Affected Software
13 affected components
Ipswitch WhatsUp Gold=8.03_hotfix_1
Progress WhatsUp Gold=7.0
Progress WhatsUp Gold=7.03
Progress WhatsUp Gold=7.04
Progress WhatsUp Gold=8.0
Progress WhatsUp Gold=8.01
Progress WhatsUp Gold=8.03
Ipswitch WhatsUp Gold=8.0
Ipswitch WhatsUp Gold=8.03
Ipswitch WhatsUp Gold=7.03
Ipswitch WhatsUp Gold=8.01
Ipswitch WhatsUp Gold=7.04
Ipswitch WhatsUp Gold=7.0
Remediation
Patch Available
Event History
Sep 17, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0799?
CVE-2004-0799 is categorized as a denial of service vulnerability that can cause a server crash.
2
How do I fix CVE-2004-0799?
To mitigate CVE-2004-0799, upgrade to a patched version of Ipswitch WhatsUp Gold that addresses this vulnerability.
3
Which versions of WhatsUp Gold are affected by CVE-2004-0799?
CVE-2004-0799 affects WhatsUp Gold versions 7.0, 7.03, 7.04, 8.0, 8.01, 8.03, and 8.03 Hotfix 1.
4
What exploit does CVE-2004-0799 utilize?
CVE-2004-0799 is exploited using a GET request that contains an MS-DOS device name, like 'prn.htm'.
5
Is there a workaround for CVE-2004-0799?
A potential workaround for CVE-2004-0799 includes implementing network controls to filter out malicious requests.