Every CVE Search/ Get API key

CVE-2004-2481

MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts...

4.6 Medium

CVE-2004-2481 is a medium vulnerability (CVSS 4.6) in Myproxy, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 81st percentile. No source names a fixed version.

MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command.

Exploit likelihood

2.11%Up 1.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.6

MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command.

Record
CVE-2004-2481
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command.

Record
CVE-2004-2481
Updated
2026-11-02
EUVDEUVD-2004-2472 No score

MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command.

Record
EUVD-2004-2472
Updated
2026-11-03
GitHub AdvisoriesGHSA-rcrv-mvrm-ghx8 No score

MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts...

MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command.

Record
GHSA-rcrv-mvrm-ghx8
Updated
2026-11-02

Affected products

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD

References

MoveEnter Open