Unscored severity · published Jan 10, 2005
CVE-2004-1223
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request…
–
CVSS
2.9%
EPSS
No
On KEV
Description
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PM
Policy Manager · F-secure
5.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1223
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1223
marc.info
http://marc.info/?l=bugtraq&m=110262921306862&w=2
www.oliverkarow.de
http://www.oliverkarow.de/research/f-secure.txt
Exploit
http://www.securityfocus.com/bid/11869
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/18413
More from Policy Manager
–
CVE-2011-1102
Cross-site scripting (XSS) vulnerability in the WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux,…
–
CVE-2011-1103
The WebReporting module in F-Secure Policy Manager 7.x, 8.00 before hotfix 2, 8.1x before hotfix 3 on Windows and hotfix 2 on Linux, and 9.00 before hotfix 4 on Windows and hotfix…
–
CVE-2007-2964
The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service (application crash) via NTFS reserved words in…