CVE-2004-0466: WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (...

Security readout for executives and security teams

This is an old denial-of-service issue in WebConnect 6.5, 6.4.4, and possibly earlier versions. A remote attacker could make the service hang by sending a crafted URL using reserved MS-DOS device names. Business impact is service disruption, not confirmed data theft or code execution. Exposure is most likely where legacy WebConnect 6.5, 6.4.4, or earlier installations remain reachable over a network, especially internet-facing deployments. The provided metadata does not identify vendor CPEs or deployment prevalence. Treat this as a legacy availability risk. Prioritize if WebConnect is still business-critical or externally reachable. If no deployment exists, record it as not applicable after inventory confirmation. Mitigation focus: Inventory WebConnect deployments and confirm whether affected versions are still in use.; Check vendor and linked advisory guidance for patches, upgrades, or supported replacements.; Restrict network access to WebConnect if it is still required..

Prepared

Jun 30, 2026, 00:10 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.