CVEvulnerability

CVE-2004-1878

5.0 MEDIUM Published 2004-03-30 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-03-30
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash).

Affected configurations

• linbit technologies linbox officeserver

Referenced by CWE · observed example (2)

CWE-41 Improper Resolution of Path Equivalence weakness
CWE-50 Path Equivalence: '//multiple/leading/slash' weakness

References

http://marc.info/?l=bugtraq&m=108067245401673&w=2 marc.info
http://secunia.com/advisories/11264 Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/10010 Exploit, Patch, Vendor Advisory
http://www.websec.org/adv/linbit.txt.html Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15677 exchange.xforce.ibmcloud.com
http://marc.info/?l=bugtraq&m=108067245401673&w=2 marc.info
http://secunia.com/advisories/11264 Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/10010 Exploit, Patch, Vendor Advisory
http://www.websec.org/adv/linbit.txt.html Exploit, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15677 exchange.xforce.ibmcloud.com

CVE-2004-1878

Description

Affected configurations

Related

Referenced by CWE · observed example (2)

References