Security Advisory

CVE-2002-1484

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2003-03-18 05:00:00
Last updated 2024-08-08 03:26:28
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message.