CVE-2004-1890
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
IRIX是一款由SGI公司开发和维护的商业性质UNIX操作系统。 SGI IRIX包含的FTP服务程序存在多个问题，远程攻击者可使FTP服务程序崩溃。 第一问题未知涉及到IRIX FTPD进程在当与Microsoft Windows 2000连接时会由于连接失败而产生不确定的挂起。 第二个问题未知在处理PORT模式上，可造成拒绝服务。 第三个问题未知ftp_syslog()函数在匿名FTP方式下存在问题，可造成拒绝服务。 目前没有详细漏洞细节提供。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2004-1890
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via the PORT mode.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
SGI IRIX ftpd多个远程拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IRIX是一款由SGI公司开发和维护的商业性质UNIX操作系统。 SGI IRIX包含的FTP服务程序存在多个问题，远程攻击者可使FTP服务程序崩溃。 第一问题未知涉及到IRIX FTPD进程在当与Microsoft Windows 2000连接时会由于连接失败而产生不确定的挂起。 第二个问题未知在处理PORT模式上，可造成拒绝服务。 第三个问题未知ftp_syslog()函数在匿名FTP方式下存在问题，可造成拒绝服务。 目前没有详细漏洞细节提供。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2004-1890
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2004-1890
请登录查看更多情报信息。
Vendor Advisories for CVE-2004-1890 (2)
Other References for CVE-2004-1890 (1)
-
ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc vendor-advisory x_refsource_SGI
Same Patch Batch · n/a · 2005-05-10 · 360 CVEs total
| CVE-2004-1945 | Kinesphere Corporation Exchange POP3远程缓冲区溢出漏洞 | |
| CVE-2004-1956 | PostNuke Pheonix多个跨站脚本及路径泄露漏洞 | |
| CVE-2004-1955 | PHProfession多个漏洞 | |
| CVE-2004-1954 | PHProfession多个漏洞 | |
| CVE-2004-1953 | PHProfession多个漏洞 | |
| CVE-2004-1952 | Advanced Guestbook密码参数SQL注入漏洞 | |
| CVE-2004-1951 | Xine和Xine-Lib多个远程文件覆盖漏洞 | |
| CVE-2004-1950 | PHPBB Common.php IP欺骗地址漏洞 | |
| CVE-2004-1949 | PostNuke Phoenix多个模块SQL注入漏洞 | |
| CVE-2004-1948 | NcFTP本地信息泄露漏洞 | |
| CVE-2004-1947 | Softwin BitDefender AvxScanOnlineCtrl COM对象信息泄露漏洞 | |
| CVE-2004-1946 | Cherokee Web Server格式字符串漏洞 | |
| CVE-2004-1940 | KPhone Malformed STUN Packet拒绝服务漏洞 | |
| CVE-2004-1935 | SCT Campus Pipeline电子邮件附件脚本注入漏洞 | |
| CVE-2004-1936 | ZoneLabs ZoneAlarm Pro/Plus MailSafe过滤绕开漏洞 | |
| CVE-2004-1937 | Nuked-Klan多个漏洞 | |
| CVE-2004-1938 | Phorum Phorum_URIAuth远程SQL注入漏洞 | |
| CVE-2004-1939 | Rhino Software Zaep AntiSpam 跨站脚本漏洞 | |
| CVE-2004-1942 | Sun Solaris Patch信息泄露漏洞 | |
| CVE-2004-1944 | Qualcomm Eudora MIME消息嵌套服务拒绝漏洞 |
Showing top 20 of 360 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2004-1890
No comments yet