CVE-2004-2051

Medium

Description

The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL.

SeverityMedium
CVSS5.0
Exploit probability—
ProductEsesix Thintune Extreme
PublishedJul 24, 2004
First seenJul 24, 2004

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
esesix thintune_extreme2.4.38_firmware—
esesix thintune_l2.4.38_firmware—
esesix thintune_m2.4.38_firmware—
esesix thintune_mobile2.4.38_firmware—
esesix thintune_s2.4.38_firmware—
esesix thintune_xm2.4.38_firmware—
esesix thintune_xs2.4.38_firmware—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2004-2051 · Esesix Thintune Extreme · Dark Radar