Read the docs
TI-2004-00763 Aliases CVE-2004-0826GHSA-v2jq-g922-rhj4

Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows…

Priority MEDIUM 53Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

Why it matters now

EPSS 0.22525 97th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 93

CPEVersionsRoleVendor
cpe:2.3:a:mozilla:network_security_services:3.2:*:*:*:*:*:*:*3.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.2.1:*:*:*:*:*:*:*3.2.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.3:*:*:*:*:*:*:*3.3VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.3.1:*:*:*:*:*:*:*3.3.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.3.2:*:*:*:*:*:*:*3.3.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.4:*:*:*:*:*:*:*3.4VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.4.1:*:*:*:*:*:*:*3.4.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.4.2:*:*:*:*:*:*:*3.4.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.5:*:*:*:*:*:*:*3.5VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.6:*:*:*:*:*:*:*3.6VulnerableMozilla
  • cpe:2.3:a:mozilla:network_security_services:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.4.2:*:*:*:*:*:*:* Versions 3.4.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.6:*:*:*:*:*:*:* Versions 3.6 Vulnerable ·Mozilla
Show 83 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mozilla:network_security_services:3.6.1:*:*:*:*:*:*:*3.6.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7:*:*:*:*:*:*:*3.7VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.1:*:*:*:*:*:*:*3.7.1VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.2:*:*:*:*:*:*:*3.7.2VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.3:*:*:*:*:*:*:*3.7.3VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.5:*:*:*:*:*:*:*3.7.5VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.7.7:*:*:*:*:*:*:*3.7.7VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.8:*:*:*:*:*:*:*3.8VulnerableMozilla
cpe:2.3:a:mozilla:network_security_services:3.9:*:*:*:*:*:*:*3.9VulnerableMozilla
cpe:2.3:a:netscape:certificate_server:1.0:patch1:*:*:*:*:*:*1.0 patch1VulnerableNetscape
cpe:2.3:a:netscape:certificate_server:4.2:*:*:*:*:*:*:*4.2VulnerableNetscape
cpe:2.3:a:netscape:directory_server:1.3:patch5:*:*:*:*:*:*1.3 patch5VulnerableNetscape
cpe:2.3:a:netscape:directory_server:3.1:patch1:*:*:*:*:*:*3.1 patch1VulnerableNetscape
cpe:2.3:a:netscape:directory_server:3.12:*:*:*:*:*:*:*3.12VulnerableNetscape
cpe:2.3:a:netscape:directory_server:4.1:*:*:*:*:*:*:*4.1VulnerableNetscape
cpe:2.3:a:netscape:directory_server:4.11:*:*:*:*:*:*:*4.11VulnerableNetscape
cpe:2.3:a:netscape:directory_server:4.13:*:*:*:*:*:*:*4.13VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:2.0:*:*:*:*:*:*:*2.0VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:2.0.1c:*:*:*:*:*:*:*2.0.1cVulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:2.0a:*:*:*:*:*:*:*2.0aVulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*3.0VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.0.1:*:*:*:*:*:*:*3.0.1VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.0.1b:*:*:*:*:*:*:*3.0.1bVulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.0.7a:*:netware:*:*:*:*:*3.0.7aVulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.0l:*:*:*:*:*:*:*3.0lVulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.1:*:*:*:*:*:*:*3.1VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.2:*:*:*:*:*:*:*3.2VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.3:*:*:*:*:*:*:*3.3VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:*3.4VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:*3.5VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.5:*:solaris:*:*:*:*:*3.5VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.5.1:*:*:*:*:*:*:*3.5.1VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*3.6VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.6:*:solaris:*:*:*:*:*3.6VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.6:sp1:*:*:*:*:*:*3.6 sp1VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.6:sp2:*:*:*:*:*:*3.6 sp2VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:3.6:sp3:*:*:*:*:*:*3.6 sp3VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:4.0:*:*:*:*:*:*:*4.0VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:4.1:sp3:*:*:*:*:*:*4.1 sp3VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:4.1:sp4:*:*:*:*:*:*4.1 sp4VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:4.1:sp5:*:*:*:*:*:*4.1 sp5VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:4.1:sp6:*:*:*:*:*:*4.1 sp6VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:4.1:sp7:*:*:*:*:*:*4.1 sp7VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:4.1:sp8:*:*:*:*:*:*4.1 sp8VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:4.1.1:*:netware:*:*:*:*:*4.1.1VulnerableNetscape
cpe:2.3:a:netscape:enterprise_server:5.0:*:netware:*:*:*:*:*5.0VulnerableNetscape
cpe:2.3:a:netscape:personalization_engine:*:*:*:*:*:*:*:*all versionsVulnerableNetscape
cpe:2.3:a:sun:java_enterprise_system:2003q4:*:*:*:*:*:*:*2003q4VulnerableSun
cpe:2.3:a:sun:java_enterprise_system:2004q2:*:*:*:*:*:*:*2004q2VulnerableSun
cpe:2.3:a:sun:java_system_application_server:7.0:*:enterprise:*:*:*:*:*7.0VulnerableSun
cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*7.0VulnerableSun
cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*7.0VulnerableSun
cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:*7.0 ur4VulnerableSun
cpe:2.3:a:sun:java_system_application_server:7.1:*:*:*:*:*:*:*7.1VulnerableSun
cpe:2.3:a:sun:one_application_server:6.0:*:*:*:*:*:*:*6.0VulnerableSun
cpe:2.3:a:sun:one_application_server:6.0:sp1:*:*:*:*:*:*6.0 sp1VulnerableSun
cpe:2.3:a:sun:one_application_server:6.0:sp2:*:*:*:*:*:*6.0 sp2VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:*4.1VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:*4.1 sp1VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:*4.1 sp10VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:*4.1 sp11VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp12:*:*:*:*:*:*4.1 sp12VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp13:*:*:*:*:*:*4.1 sp13VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp14:*:*:*:*:*:*4.1 sp14VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:*4.1 sp2VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:*4.1 sp3VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:*4.1 sp4VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:*4.1 sp5VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:*4.1 sp6VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:*4.1 sp7VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:*4.1 sp8VulnerableSun
cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:*4.1 sp9VulnerableSun
cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:*6.0 sp3VulnerableSun
cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:*6.0 sp4VulnerableSun
cpe:2.3:a:sun:one_web_server:6.0:sp5:*:*:*:*:*:*6.0 sp5VulnerableSun
cpe:2.3:a:sun:one_web_server:6.0:sp7:*:*:*:*:*:*6.0 sp7VulnerableSun
cpe:2.3:a:sun:one_web_server:6.0:sp8:*:*:*:*:*:*6.0 sp8VulnerableSun
cpe:2.3:a:sun:one_web_server:6.1:*:*:*:*:*:*:*6.1VulnerableSun
cpe:2.3:a:sun:one_web_server:6.1:sp1:*:*:*:*:*:*6.1 sp1VulnerableSun
cpe:2.3:a:sun:one_web_server:6.1:sp2:*:*:*:*:*:*6.1 sp2VulnerableSun
cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*11.00VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*11.11VulnerableHewlett Packard Enterprise
cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:*11.23VulnerableHewlett Packard Enterprise
  • cpe:2.3:a:mozilla:network_security_services:3.6.1:*:*:*:*:*:*:* Versions 3.6.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7:*:*:*:*:*:*:* Versions 3.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.1:*:*:*:*:*:*:* Versions 3.7.1 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.2:*:*:*:*:*:*:* Versions 3.7.2 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.3:*:*:*:*:*:*:* Versions 3.7.3 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.5:*:*:*:*:*:*:* Versions 3.7.5 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.7.7:*:*:*:*:*:*:* Versions 3.7.7 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.8:*:*:*:*:*:*:* Versions 3.8 Vulnerable ·Mozilla
  • cpe:2.3:a:mozilla:network_security_services:3.9:*:*:*:*:*:*:* Versions 3.9 Vulnerable ·Mozilla
  • cpe:2.3:a:netscape:certificate_server:1.0:patch1:*:*:*:*:*:* Versions 1.0 patch1 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:certificate_server:4.2:*:*:*:*:*:*:* Versions 4.2 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:directory_server:1.3:patch5:*:*:*:*:*:* Versions 1.3 patch5 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:directory_server:3.1:patch1:*:*:*:*:*:* Versions 3.1 patch1 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:directory_server:3.12:*:*:*:*:*:*:* Versions 3.12 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:directory_server:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:directory_server:4.11:*:*:*:*:*:*:* Versions 4.11 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:directory_server:4.13:*:*:*:*:*:*:* Versions 4.13 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:2.0.1c:*:*:*:*:*:*:* Versions 2.0.1c Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:2.0a:*:*:*:*:*:*:* Versions 2.0a Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.0.1b:*:*:*:*:*:*:* Versions 3.0.1b Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.0.7a:*:netware:*:*:*:*:* Versions 3.0.7a Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.0l:*:*:*:*:*:*:* Versions 3.0l Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.3:*:*:*:*:*:*:* Versions 3.3 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.5:*:solaris:*:*:*:*:* Versions 3.5 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.5.1:*:*:*:*:*:*:* Versions 3.5.1 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:* Versions 3.6 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.6:*:solaris:*:*:*:*:* Versions 3.6 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.6:sp1:*:*:*:*:*:* Versions 3.6 sp1 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.6:sp2:*:*:*:*:*:* Versions 3.6 sp2 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:3.6:sp3:*:*:*:*:*:* Versions 3.6 sp3 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:4.1:sp3:*:*:*:*:*:* Versions 4.1 sp3 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:4.1:sp4:*:*:*:*:*:* Versions 4.1 sp4 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:4.1:sp5:*:*:*:*:*:* Versions 4.1 sp5 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:4.1:sp6:*:*:*:*:*:* Versions 4.1 sp6 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:4.1:sp7:*:*:*:*:*:* Versions 4.1 sp7 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:4.1:sp8:*:*:*:*:*:* Versions 4.1 sp8 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:4.1.1:*:netware:*:*:*:*:* Versions 4.1.1 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:enterprise_server:5.0:*:netware:*:*:*:*:* Versions 5.0 Vulnerable ·Netscape
  • cpe:2.3:a:netscape:personalization_engine:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Netscape
  • cpe:2.3:a:sun:java_enterprise_system:2003q4:*:*:*:*:*:*:* Versions 2003q4 Vulnerable ·Sun
  • cpe:2.3:a:sun:java_enterprise_system:2004q2:*:*:*:*:*:*:* Versions 2004q2 Vulnerable ·Sun
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:enterprise:*:*:*:*:* Versions 7.0 Vulnerable ·Sun
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:* Versions 7.0 Vulnerable ·Sun
  • cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:* Versions 7.0 Vulnerable ·Sun
  • cpe:2.3:a:sun:java_system_application_server:7.0:ur4:*:*:*:*:*:* Versions 7.0 ur4 Vulnerable ·Sun
  • cpe:2.3:a:sun:java_system_application_server:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_application_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_application_server:6.0:sp1:*:*:*:*:*:* Versions 6.0 sp1 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_application_server:6.0:sp2:*:*:*:*:*:* Versions 6.0 sp2 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:*:*:*:*:*:*:* Versions 4.1 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp1:*:*:*:*:*:* Versions 4.1 sp1 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp10:*:*:*:*:*:* Versions 4.1 sp10 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp11:*:*:*:*:*:* Versions 4.1 sp11 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp12:*:*:*:*:*:* Versions 4.1 sp12 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp13:*:*:*:*:*:* Versions 4.1 sp13 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp14:*:*:*:*:*:* Versions 4.1 sp14 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp2:*:*:*:*:*:* Versions 4.1 sp2 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp3:*:*:*:*:*:* Versions 4.1 sp3 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp4:*:*:*:*:*:* Versions 4.1 sp4 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp5:*:*:*:*:*:* Versions 4.1 sp5 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp6:*:*:*:*:*:* Versions 4.1 sp6 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp7:*:*:*:*:*:* Versions 4.1 sp7 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp8:*:*:*:*:*:* Versions 4.1 sp8 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:4.1:sp9:*:*:*:*:*:* Versions 4.1 sp9 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:6.0:sp3:*:*:*:*:*:* Versions 6.0 sp3 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:6.0:sp4:*:*:*:*:*:* Versions 6.0 sp4 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:6.0:sp5:*:*:*:*:*:* Versions 6.0 sp5 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:6.0:sp7:*:*:*:*:*:* Versions 6.0 sp7 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:6.0:sp8:*:*:*:*:*:* Versions 6.0 sp8 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:6.1:sp1:*:*:*:*:*:* Versions 6.1 sp1 Vulnerable ·Sun
  • cpe:2.3:a:sun:one_web_server:6.1:sp2:*:*:*:*:*:* Versions 6.1 sp2 Vulnerable ·Sun
  • cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:* Versions 11.00 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:* Versions 11.11 Vulnerable ·Hewlett Packard Enterprise
  • cpe:2.3:o:hp:hp-ux:11.23:*:ia64_64-bit:*:*:*:*:* Versions 11.23 Vulnerable ·Hewlett Packard Enterprise

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-0826
  2. 2026-10-03 Alias added: GHSA-v2jq-g922-rhj4

References

Patch 1

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences