Details of VAR-200412-0734

ID

VAR-200412-0734

CVE

CVE-2004-2681

TITLE

PeerSec MatrixSSL Session hijacking vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200412-810

DESCRIPTION

PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session. MatrixSSL is prone to a cross-site scripting vulnerability

Trust: 1.17

sources: NVD: CVE-2004-2681 // BID: 82537

AFFECTED PRODUCTS

vendor:	peersec	model:	matrixssl	scope:	lte	version:	1.0	Trust: 1.0
vendor:	peersec	model:	matrixssl	scope:	eq	version:	1.0	Trust: 0.6
vendor:	peersec	model:	networks matrixssl	scope:	eq	version:	1.0	Trust: 0.3

sources: BID: 82537 // CNNVD: CNNVD-200412-810 // NVD: CVE-2004-2681

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2004-2681
value:	HIGH
Trust: 1.0
CNNVD:	CNNVD-200412-810
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2004-2681
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0

sources: CNNVD: CNNVD-200412-810 // NVD: CVE-2004-2681

PROBLEMTYPE DATA

problemtype:

NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-2681

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200412-810

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200412-810

EXTERNAL IDS

db:	NVD	id:	CVE-2004-2681	Trust: 1.9
db:	XF	id:	40483	Trust: 0.9
db:	CNNVD	id:	CNNVD-200412-810	Trust: 0.6
db:	BID	id:	82537	Trust: 0.3

sources: BID: 82537 // CNNVD: CNNVD-200412-810 // NVD: CVE-2004-2681

REFERENCES

url:	http://www.matrixssl.org/archives/000076.html	Trust: 1.9
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/40483	Trust: 1.0
url:	http://xforce.iss.net/xforce/xfdb/40483	Trust: 0.9

sources: BID: 82537 // CNNVD: CNNVD-200412-810 // NVD: CVE-2004-2681

CREDITS

Unknown

Trust: 0.3

sources: BID: 82537

SOURCES

db:	BID	id:	82537
db:	CNNVD	id:	CNNVD-200412-810
db:	NVD	id:	CVE-2004-2681

LAST UPDATE DATE

2024-08-14T15:31:11.821000+00:00

SOURCES UPDATE DATE

db:	BID	id:	82537	date:	2004-12-31T00:00:00
db:	CNNVD	id:	CNNVD-200412-810	date:	2007-08-01T00:00:00
db:	NVD	id:	CVE-2004-2681	date:	2017-07-29T01:29:16.420

SOURCES RELEASE DATE

db:	BID	id:	82537	date:	2004-12-31T00:00:00
db:	CNNVD	id:	CNNVD-200412-810	date:	2004-12-31T00:00:00
db:	NVD	id:	CVE-2004-2681	date:	2004-12-31T05:00:00