CVE:CVE-2004-1610
CNNVD:CNNVD-200410-029
SalesLogix 6.1版本使用客户指定路径覆盖某些文件。远程授权用户可以借助(1) vMME.AttachmentPath或者(2) vMME.LibraryPath变量创建任意文件执行任意代码。
solution:Upgrade best_software saleslogix to a higher version than *; Upgrade saleslogix_corporation saleslogix to a higher version than 2000.0,and avoid the version 2000.0