Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2004-1166

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。Microsoft Internet Explorer对URI参数串的处理上存在漏洞，远程攻击者可能利用此漏洞在用户访问的FTP服务器上执行恶意命令。Internet Explorer允许用户在地址栏中输入ftp://ftpuser:ftppass@server/dire

AI Predicted 6.8 Difficulty: Moderate EPSS 39.16% · P99

Public Exploits 1

ExploitDB · 1 EDB-24800 [remote]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2004-1166

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Internet Explorer 代码注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。Microsoft Internet Explorer对URI参数串的处理上存在漏洞，远程攻击者可能利用此漏洞在用户访问的FTP服务器上执行恶意命令。Internet Explorer允许用户在地址栏中输入ftp://ftpuser:ftppass@server/dire
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2004-1166

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2004-1166

请登录查看更多情报信息。

Vendor Advisories for CVE-2004-1166 (11)

Mailing List Discussions for CVE-2004-1166 (1)

Other References for CVE-2004-1166 (1)

Same Patch Batch · n/a · 2004-12-10 · 21 CVEs total

CVE-2004-1161 rssh 命令执行漏洞
CVE-2004-1171 KDE SMB用户凭证 信息泄露漏洞
CVE-2004-1170 a2ps filename 命令执行漏洞
CVE-2004-1169 SAP MaxDB WebTools 拒绝服务漏洞
CVE-2004-1168 MaxDB WebTools WebDav 缓冲区溢出漏洞
CVE-2004-1167 Gentoo Mirrorselect 文件覆盖漏洞
CVE-2004-1165 Konqueror FTP 命令执行漏洞
CVE-2004-1164 Cisco CNSNetworkRegistrar lock 远程拒绝服务漏洞
CVE-2004-1163 Cisco CNS CCM 拒绝服务漏洞
CVE-2004-1162 scponly unison 命令执行漏洞
CVE-2004-0915 ViewCVS repository 弱安全机制漏洞
CVE-2004-1160 Netscape NetscapeBrowser 窗口劫持漏洞
CVE-2004-1158 Konquero 窗口劫持漏洞
CVE-2004-1157 Opera 注入漏洞
CVE-2004-1156 Mozilla浏览器跨域标签窗口形式领域的研究热点漏洞
CVE-2004-1155 Microsoft Internet Explorer 安全漏洞
CVE-2004-1122 Apple Safari 对话框欺骗漏洞
CVE-2004-1067 CyrusIMAPServer mysasl_canon_user 缓冲区溢出漏洞
CVE-2004-1026 imlib image handler 整数溢出漏洞
CVE-2004-0993 HP hpsockd 拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2004-1166

No comments yet

Leave a comment