Webstar
Vendor:
First CVE: Jul 27, 2004 · Active for 21 years
9
Total CVEs
More Total CVEs than 86% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
5.4
Avg CVSS
Higher Avg CVSS than 11% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Webstar over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 27, 2004
21 years ago
Most Recent CVE
Oct 5, 2005
7,597 days ago
CVE Severity & Scoring
Webstar9 CVEs
11%
67%
22%
All CVEs352,294 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network1 (11.1%)
Unknown8 (88.9%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (11.1%)
High0 (0.0%)
Unknown8 (88.9%)
User Interaction
None1 (11.1%)
Unknown8 (88.9%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (11.1%)
Unknown8 (88.9%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2004-0695HIGH Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command. | Jul 27, 2004 | 7.5 | 64 | NO | YES |
CVE-2004-0079HIGH The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake t | Nov 23, 2004 | 7.5 | 29 | NO | NO |
CVE-2005-1507MEDIUM Buffer overflow in the Tomcat plugin in 4d WebSTAR 5.33 and 5.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL. | May 11, 2005 | 5.0 | 24 | NO | YES |
CVE-2004-0112MEDIUM The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, whi | Nov 23, 2004 | 5.0 | 23 | NO | NO |
CVE-2004-0081MEDIUM OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Co | Nov 23, 2004 | 5.0 | 18 | NO | NO |
CVE-2005-3143MEDIUM Unspecified vulnerability in the Mailbox Server for 4D WebStar before 5.3.5 allows attackers to cause a denial of service (crash) via IMAP clients on Mac OS X 10.4 Mail 2. | Oct 5, 2005 | 5.0 | 16 | NO | NO |
CVE-2004-0696MEDIUM The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character. | Jul 27, 2004 | 5.0 | 15 | NO | NO |
CVE-2004-0697MEDIUM Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information. | Jul 27, 2004 | 5.0 | 15 | NO | NO |
4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack. | Jul 27, 2004 | 3.6 | 13 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
11.1% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
22.2% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Webstar
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.4 | 1 | 5.0 | 5.7% | 0 | 1 |
| 5.3.4 | 1 | 5.0 | 1.3% | 0 | 0 |
| 5.3.3 | 2 | 5.0 | 3.5% | 0 | 1 |
| 5.3.2 | 5 | 5.2 | 8.5% | 0 | 1 |
| 5.3.1 | 8 | 5.5 | 8.7% | 0 | 1 |
| 5.3 | 8 | 5.5 | 8.7% | 0 | 1 |
| 5.2.4 | 8 | 5.5 | 8.7% | 0 | 1 |
| 5.2.3 | 8 | 5.5 | 8.7% | 0 | 1 |
| 5.2.2 | 8 | 5.5 | 8.7% | 0 | 1 |
| 5.2.1 | 8 | 5.5 | 8.7% | 0 | 1 |
| 5.2 | 8 | 5.5 | 8.7% | 0 | 1 |
| 5.1.3 | 1 | 5.0 | 1.3% | 0 | 0 |
| 5.1.2 | 1 | 5.0 | 1.3% | 0 | 0 |
| 4.0 | 7 | 5.5 | 9.8% | 0 | 1 |