CVE-2004-2393
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2004-2393
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Java安全套接口扩展证书验证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Java安全套接字扩展(JSSE)用于应用程序中提供数据传输安全性。 Java安全套接字扩展不正确验证WEB站点的数字证书，这可导致允许不可信WEB站点认为是可信的通过SSL的站点。 目前没有详细漏洞细节提供。 <*链接：http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F57560 *>
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2004-2393
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-2393
请登录查看更多情报信息。
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201724-1vendor-advisoryx_refsource_SUNALERT
- http://sunsolve.sun.com/search/document.do?assetkey=1-77-1001273.1-1vendor-advisoryx_refsource_SUNALERT
- https://nvd.nist.gov/vuln/detail/CVE-2004-2393
Same Patch Batch · n/a · 2005-08-17 · 49 CVEs total
| CVE-2005-2605 | Lasso专业服务器 认证绕过漏洞 | |
| CVE-2005-2608 | SafeHTML 多个跨站脚本漏洞 | |
| CVE-2005-2610 | VegaDNS 'index.php' 跨站脚本漏洞 | |
| CVE-2005-2614 | Discuz! 任意文件上传漏洞 | |
| CVE-2005-2615 | EQDKP 'Session.PHP' 认证绕过漏洞 | |
| CVE-2005-2616 | EZUpload 多个远程文件包含漏洞 | |
| CVE-2005-2617 | Linux内核 'syscall32.c'内存泄露漏洞 | |
| CVE-2005-2620 | Novell GroupWise 明文口令泄露漏洞 | |
| CVE-2005-2613 | CPaint 代码执行漏洞 | |
| CVE-2005-2606 | PHlyMail 未明认证绕过漏洞 | |
| CVE-2005-2607 | PHPSimplicity Simplicity 'download.php' PHP文件包含漏洞 | |
| CVE-2005-2604 | My Image Gallery 'index.php' 信息泄露漏洞 | |
| CVE-2005-2603 | My Image Gallery 'index.php' 跨站脚本漏洞 | |
| CVE-2005-2602 | Mozilla Firefox和Thunderbird 长URI混淆漏洞 | |
| CVE-2005-2601 | MidiCart ASP 'Item_Show.ASP' SQL注入漏洞 | |
| CVE-2005-2600 | FUDForum 树状视图验证漏洞 | |
| CVE-2005-2599 | Hummingbird FTP 弱密码加密漏洞 | |
| CVE-2005-2598 | Dokeos 多个目录遍历漏洞 | |
| CVE-2005-2597 | AOL客户端 本地权限提升漏洞 | |
| CVE-2005-2596 | Gallery 'User.php' 访问验证漏洞 |
Showing top 20 of 49 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2004-2393
No comments yet