Vulnerability Details : CVE-2004-0799
The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm".
Vulnerability category: Denial of service
Products affected by CVE-2004-0799
- cpe:2.3:a:ipswitch:whatsup_gold:8.03_hotfix_1:*:*:*:*:*:*:*
- cpe:2.3:a:progress:whatsup_gold:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:progress:whatsup_gold:7.03:*:*:*:*:*:*:*
- cpe:2.3:a:progress:whatsup_gold:7.04:*:*:*:*:*:*:*
- cpe:2.3:a:progress:whatsup_gold:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:progress:whatsup_gold:8.01:*:*:*:*:*:*:*
- cpe:2.3:a:progress:whatsup_gold:8.03:*:*:*:*:*:*:*
Threat overview for CVE-2004-0799
Top countries where our scanners detected CVE-2004-0799
Top open port discovered on systems with this issue
8200
IPs affected by CVE-2004-0799 1,536
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2004-0799!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2004-0799
0.34%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 71 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2004-0799
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:N/A:P |
10.0
|
2.9
|
NIST |
References for CVE-2004-0799
-
http://www.idefense.com/application/poi/display?id=142&type=vulnerabilities
U.S. | Let There Be Change | AccenturePatch;Vendor Advisory
-
http://www.ipswitch.com/Support/WhatsUp/patch-upgrades.html
Transfer Data the Secure & Compliant Way | ProgressPatch
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/17418
WhatsUp Gold GET request prn.htm denial of service CVE-2004-0799 Vulnerability Report
Jump to