CveMateVulnerability intelligence

4D vulnerabilities

14 vulnerabilities

Known vulnerabilities in 4D products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 7 products.

Products

7

Webstar9 vulnerabilities
Server4 vulnerabilities
4D1 vulnerabilities
4D Server1 vulnerabilities
4D Server.Exe1 vulnerabilities
4D.Exe1 vulnerabilities
Webstar Http Server1 vulnerabilities

CVE-2005-15074dwebstar21y ago11-05-2005 04:00

Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL.CVE-2005-31434dwebstar21y ago05-10-2005 04:00

Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP clients on Mac OS X 10.4 Mail 2.CVE-2000-02904dwebstar_http_server24y ago09-03-2002 05:00

Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.CVE-2004-06964dwebstar22y ago16-07-2004 04:00

The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.CVE-2004-06974dwebstar22y ago16-07-2004 04:00

Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information.CVE-2004-00794dwebstar+5522y ago18-03-2004 05:00

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.CVE-2004-00814dwebstar+5522y ago18-03-2004 05:00

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.CVE-2004-01124dwebstar+5422y ago18-03-2004 05:00

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.CVE-2004-06984dwebstar22y ago16-07-2004 04:00

4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.CVE-2004-06954dwebstar22y ago16-07-2004 04:00

Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.CVE-2024-398474d4d server+15mo ago30-04-2026 07:10

Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.CVE-2023-47704d4d+32y ago30-11-2023 13:32

An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vulnerability consists in a DLL hijacking by replacing x64 shfolder.dll in the installation path, causing an arbitrary code execution.CVE-2023-302234dserver3y ago16-06-2023 00:00

A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and earlier allows attackers to send crafted TCP packets containing requests to perform arbitrary actions.CVE-2023-302224dserver3y ago16-06-2023 00:00

An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7 and earlier allows attackers to retrieve password hashes for all users via eavesdropping.