CVE-2004-0205: avaya modular_messaging_message_storage_server

EPSS trend

Probability

24.48%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 24.48% on 19-09-2026

19-09-202619-10-2026

EPSS score

24.48%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

9 links

www.us-cert.gov/cas/techalerts/TA04-196A.htmlThird Party AdvisoryX Refsource CERTPatchUS Government Resource
www.securityfocus.com/bid/10706VDB EntryX Refsource BID
www.osvdb.org/7799VDB EntryX Refsource OSVDB
secunia.com/advisories/12061Third Party AdvisoryX Refsource SECUNIA
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-021Vendor AdvisoryX Refsource MS
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2204VDB EntrySignatureX Refsource OVAL
exchange.xforce.ibmcloud.com/vulnerabilities/16578VDB EntryX Refsource XF
www.ciac.org/ciac/bulletins/o-179.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC
www.kb.cert.org/vuls/id/717748Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource

Related vulnerabilities

CVE-2003-1582microsoftinternet_information_server10.32%16y ago05-02-2010 22:13Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inverse Lookup Log Corruption (ILLC)" issue.CVE-2003-0225microsoftinternet_information_server+138.46%23y ago30-05-2003 04:00The ASP function Response.AddHeader in Microsoft Internet Information Server (IIS) 4.0 and 5.0 does not limit memory requests when constructing headers, which allow remote attackers to generate a large header to cause a denial of service (memory consumption) with an ASP page.CVE-2003-0223microsoftinternet_information_server+117.32%23y ago30-05-2003 04:00Cross-site scripting vulnerability (XSS) in the ASP function responsible for redirection in Microsoft Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to embed a URL containing script in a redirection message.CVE-2003-0718microsoftinternet_information_server+187.91%22y ago16-10-2004 04:00The WebDAV Message Handler for Internet Information Services (IIS) 5.0, 5.1, and 6.0 allows remote attackers to cause a denial of service (memory and CPU exhaustion, application crash) via a PROPFIND request with an XML message containing XML elements with a large number of attributes.CVE-2007-2897microsoftinternet_information_server74.02%19y ago30-05-2007 10:00Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang), and possibly obtain sensitive information (device communication traffic); and might allow attackers with physical access to execute arbitrary code after connecting a data stream to a device COM port; via requests for a URI containing a '/' immediately before and after the name of a DOS device, as demonstrated by the /AUX/.aspx URI, which bypasses a blacklist for DOS device requests.CVE-2001-1243microsoftinternet_information_server+170.50%24y ago03-05-2002 04:00Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses Scripting.FileSystemObject to open a file with an MS-DOS device name, or (2) remotely injecting the device name into ASP programs that internally use Scripting.FileSystemObject.

All vulnerabilities inmodular_messaging_message_storage_server internet_information_server

CVE-2004-0205: avaya modular_messaging_message_storage_server

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References