Unscored severity · published Dec 31, 2004
CVE-2004-2481
MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the…
–
CVSS
2.1%
EPSS
No
On KEV
Description
MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Myproxy · Myproxy
6.58 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2481
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2481
Exploit
http://securitytracker.com/alerts/2004/Nov/1012322.html
Exploit
http://www.osvdb.org/12138
Exploit
http://www.securitylab.ru/vulnerability/source/210758.php
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/18265
More from Myproxy
–
CVE-2003-1199
Cross-site scripting (XSS) vulnerability in MyProxy 20030629 allows remote attackers to inject arbitrary web script or HTML via the URL