CVE-2004-2052

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Dec 31, 2004
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2004

CVE-2004-20537.5PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the CVE-2004-20545.0CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected CVE-2004-20554.3Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web scrCVE-2004-20567.5SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parCVE-2004-20577.5SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.CVE-2004-20585.0ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.CVE-2004-20595.0Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SeaCVE-2004-20605.0ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direCVE-2004-20619.8RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, bCVE-2004-20627.5SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the (1) thrCVE-2004-20634.3Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inject arbitrary HTML orCVE-2004-20644.3Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web script via the (1) Emai
CVE-2004-2052: High severity, CVSS 7.5 | Vulnix