Arbitrary File Creation and Code Execution Vulnerability in SalesLogix 6.1

CVE-2004-1610 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the (1) vMME.AttachmentPath or (2) vMME.LibraryPath variables.

Learn more about our User Device Pen Test.