CVE-2004-2663

high

Description

The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16428

http://www.securityfocus.com/bid/10562

http://www.osvdb.org/7090

http://secunia.com/advisories/11072

http://research.eeye.com/html/advisories/published/AD20040615B.html

http://marc.info/?l=full-disclosure&m=108741557604568&w=2

http://marc.info/?l=bugtraq&m=108746693619324&w=2

Details

Source: Mitre, NVD

Published: 2004-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N