DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1609
SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote attackers to gain access.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: saleslogix
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html, http://marc.info/?l=bugtraq&m=109811852218478&w=2, http://secunia.com/advisories/12883
CVE-2004-0274
Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: eggdrop_irc_bot
References: http://marc.info/?l=bugtraq&m=107634593827102&w=2, http://marc.info/?l=bugtraq&m=107643315623958&w=2, http://mogan.nonsoloirc.com/egg_advisory.txt
CVE-2004-0331
Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openmanage
References: http://marc.info/?l=bugtraq&m=107781539829143&w=2, http://sh0dan.org/files/domadv.txt, http://www.securityfocus.com/bid/9750
CVE-2004-2719
Buffer overflow in the UrlToLocal function in PunyLib.dll of Foxmail 5.0.300 allows remote attackers to execute arbitrary code via a mail message with a long From field, a different issue than CVE-2005-0339.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: foxmail
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://secunia.com/advisories/11231, http://www.securityfocus.com/bid/9954, https://exchange.xforce.ibmcloud.com/vulnerabilities/15640
CWE: CWE-119
CVE-2004-0511
Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openserver
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt, http://www.securityfocus.com/bid/10758, https://exchange.xforce.ibmcloud.com/vulnerabilities/16739
CVE-2004-0306
Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: optical_networking_systems_software
References: http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml, http://www.securityfocus.com/bid/9699, https://exchange.xforce.ibmcloud.com/vulnerabilities/15264
CVE-2004-0934
Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, etrust_ez_armor, etrust_intrusion_detection, rav_antivirus_desktop, brightstor_arcserve_backup
References: http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true, http://www.kb.cert.org/vuls/id/968818, http://www.securityfocus.com/bid/11448
CVE-2004-0636
Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: instant_messenger
References: http://secunia.com/advisories/12198/, http://www.idefense.com/application/poi/display?id=121&type=vulnerabilities, http://www.kb.cert.org/vuls/id/735966
CVE-2004-2562
SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_helpdesk
References: http://secunia.com/advisories/12123, http://www.lbehelpdesk.com/patch/web/history.txt, http://www.osvdb.org/8181
CVE-2004-2241
Cross-site scripting (XSS) vulnerability in Phorum 5.0.11 and earlier allows remote attackers to inject arbitrary HTML or web script via search.php. NOTE: some sources have reported that the affected file is read.php, but this is inconsistent with the vendor's patch.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phorum
References: http://phorum.org/cvs-changelog-5.txt, http://secunia.com/advisories/12980, http://securitytracker.com/id?1011921
CVE-2004-2113
Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: bremsserver
References: http://marc.info/?l=bugtraq&m=107513747107031&w=2, http://secunia.com/advisories/10731, http://www.osvdb.org/3754
CVE-2004-2564
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, allow remote attackers to inject arbitrary web script or HTML via (1) the show parameter in show.asp and (2) the title parameter in showperf.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: sambar_server
References: http://secunia.com/advisories/11748, http://securitytracker.com/id?1010353, http://www.oliverkarow.de/research/sambar.txt
CVE-2004-2362
PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpx
References: http://secunia.com/advisories/11554, http://securitytracker.com/id?1010061, http://www.osvdb.org/5906
CVE-2004-1726
Multiple integer overflows in (1) xviris.c, (2) xvpcx.c, and (3) xvpm.c in XV allow remote attackers to execute arbitrary code via a crafted image file that triggers a heap-based buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xv
References: http://marc.info/?l=bugtraq&m=109302498125092&w=2, http://www.securityfocus.com/bid/10985, https://exchange.xforce.ibmcloud.com/vulnerabilities/17053
CVE-2004-2582
Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ichain
References: http://secunia.com/advisories/12366, http://securitytracker.com/id?1011074, http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm
CVE-2004-0730
Multiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to inject arbitrary web script or HTML via (1) the cat_title parameter in index.php, (2) the faq[0][0] parameter in lang_faq.php as accessible from faq.php, or (3) the faq[0][0] parameter in lang_bbcode.php as accessible from faq.php.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=108999024506020&w=2, http://www.securityfocus.com/bid/10738, http://www.waraxe.us/index.php?modname=sa&id=34
CVE-2004-2032
Netgear RP114 allows remote attackers to bypass the keyword based URL filtering by requesting a long URL, as demonstrated using a large number of %20 (hex-encoded space) sequences.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rp114
References: http://marc.info/?l=bugtraq&m=108541203427391&w=2, http://secunia.com/advisories/11698, http://www.osvdb.org/6411
CVE-2004-0747
Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server
Related CWEs: CWE-131
Related CAPECs: CAPEC-100, CAPEC-47
References: http://secunia.com/advisories/12540, http://secunia.com/advisories/34920, http://securitytracker.com/id?1011303
CWE: CWE-131
CVE-2004-2372
Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME environment variable, which is used if the .bochsrc, bochsrc, and bochsrc.txt cannot be found in a known path.  NOTE: some external documents recommend that Bochs be installed setuid root, so this should be treated as a vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bochs
References: http://securitytracker.com/id?1009219, http://sourceforge.net/project/shownotes.php?release_id=215733, http://www.securiteam.com/unixfocus/5XP0L1FC0M.html
CVE-2004-0928
The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: coldfusion, cosminexus_enterprise, jrun, cosminexus_server
References: http://marc.info/?l=bugtraq&m=109621995623823&w=2, http://secunia.com/advisories/12638/, http://secunia.com/advisories/12647/
CVE-2004-0817
Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, suse_linux, linux, java_desktop_system, mandrake_linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870, http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1, http://www.debian.org/security/2004/dsa-548
CVE-2004-2731
Multiple integer overflows in Sbus PROM driver (drivers/sbus/char/openprom.c) for the Linux kernel 2.4.x up to 2.4.27, 2.6.x up to 2.6.7, and possibly later versions, allow local users to execute arbitrary code by specifying (1) a small buffer size to the copyin_string function or (2) a negative buffer size to the copyin function.
CVSS v2.0 Score: 4.4 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
Related CWEs: CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0463.html, http://secunia.com/advisories/11981, http://secunia.com/advisories/29058
CWE: CWE-189
CVE-2004-1029
The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: linux, hp-ux, enterprise_firewall, jdk, java_sdk-rte
Related CWEs: CWE-264
References: http://jouko.iki.fi/adv/javaplugin.html, http://lists.apple.com/archives/security-announce/2005/Feb/msg00000.html, http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html
CWE: CWE-264
CVE-2004-0737
Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary web script or HTML via the (1) sid, (2) max, (3) sel1, (4) sel2, (5) sel3, (6) sel4, (7) sel5, (8) match, (9) mod1, (10) mod2, or (11) mod3 parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=109026609504767&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16721, http://marc.info/?l=bugtraq&m=109026609504767&w=2
CVE-2004-1969
The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbb
References: http://marc.info/?l=bugtraq&m=108301983206107&w=2, http://secunia.com/advisories/11481, http://securitytracker.com/id?1009935
CVE-2004-1775
Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ios, catos
References: http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml, http://www.kb.cert.org/vuls/id/645400, http://www.securityfocus.com/bid/5030
CVE-2004-1105
Nortel Networks Contivity VPN Client displays a different error message depending on whether the username is valid or invalid, which could allow remote attackers to gain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: contivity
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0291.html, http://www.kb.cert.org/vuls/id/830214, http://www.kb.cert.org/vuls/id/CRDY-626N7F
CVE-2004-1146
Multiple cross-site scripting (XSS) vulnerabilities in (1) main.c and (2) login.c for CVSTrac before 1.1.5 allow remote attackers to inject arbitrary HTML and web script.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cvstrac
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html, http://marc.info/?l=bugtraq&m=110332469631253&w=2, http://www.cvstrac.org/cvstrac/chngview?cn=320
CVE-2004-0343
Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL via (1) the msg parameter in ModifyMessage.php or (2) the postid parameter in ModifyMessage.php.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: yabb
References: http://marc.info/?l=bugtraq&m=107816202813083&w=2, http://www.securityfocus.com/bid/9774, https://exchange.xforce.ibmcloud.com/vulnerabilities/15354
CVE-2004-2499
Unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier allows remote attackers to cause a denial of service via unknown attack vectors when a web site is "improperly accessed."
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: web_page_generator, web_page_generator_enterprise
References: http://secunia.com/advisories/12150, http://www.hitachi-support.com/security_e/vuls_e/HS04-002_e/index-e.html, http://www.osvdb.org/8262
CVE-2004-0941
Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gdlib, secure_linux
References: http://secunia.com/advisories/13179/, http://secunia.com/advisories/18686, http://secunia.com/advisories/20824
CVE-2004-2691
Unspecified vulnerability in 3Com SuperStack 3 4400 switches with firmware version before 3.31 allows remote attackers to cause a denial of service (device reset) via a crafted request to the web management interface.  NOTE: the provenance of this information is unknown; details are obtained from third party reports.
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Affected Products: 3c17205-us, 3c17210-us, superstack_3_switch
References: http://secunia.com/advisories/11934, http://www.osvdb.org/7246, https://exchange.xforce.ibmcloud.com/vulnerabilities/16497
CVE-2004-1499
Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: helm_control_panel
References: http://marc.info/?l=bugtraq&m=109943858026542&w=2, http://secunia.com/advisories/13079, http://www.hat-squad.com/en/000077.html
CVE-2004-2429
Multiple stack-based and heap-based buffer overflows in EnderUNIX spamGuard before 1.7-BETA allow remote attackers to execute arbitrary code via the (1) qmail_parseline and (2) sendmail_parseline functions in parser.c, (3) loadconfig and (4) removespaces functions in loadconfig.c, and possibly (5) unspecified functions in functions.c.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: spamguard
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html, http://secunia.com/advisories/11747, http://securitytracker.com/id?1010342
CVE-2004-0279
AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aim_sniff
References: http://marc.info/?l=bugtraq&m=107662243303439&w=2, http://www.securityfocus.com/bid/9653, https://exchange.xforce.ibmcloud.com/vulnerabilities/15199
CVE-2004-0370
The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:06.ipv6.asc, http://secunia.com/advisories/11233, http://www.securityfocus.com/bid/9992
CVE-2004-0999
zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: zgv_image_viewer
References: http://www.debian.org/security/2004/dsa-608, http://www.securityfocus.com/bid/11915, https://exchange.xforce.ibmcloud.com/vulnerabilities/18480
CVE-2004-1328
Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://marc.info/?l=bugtraq&m=110355911415320&w=2, http://secunia.com/advisories/13565/, http://www.securityfocus.com/bid/12029
CVE-2004-1273
Buffer overflow in the DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a long filename.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: greed
References: http://tigger.uic.edu/~jlongs2/holes/greed.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18633, http://tigger.uic.edu/~jlongs2/holes/greed.txt
CVE-2004-1287
Buffer overflow in the error function in preproc.c for NASM 0.98.38 1.2 allows attackers to execute arbitrary code via a crafted asm file, a different vulnerability than CVE-2005-1194.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netwide_assembler
Related CWEs: CWE-787
References: http://tigger.uic.edu/~jlongs2/holes/nasm.txt, http://www.redhat.com/support/errata/RHSA-2005-381.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18540
CWE: CWE-787
CVE-2004-0871
Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mozilla
References: http://securityfocus.com/archive/1/375407, http://securitytracker.com/id?1011331, http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt
CVE-2004-1149
Computer Associates eTrust EZ Antivirus 7.0.0 to 7.0.4, including 7.0.1.4, installs its files with insecure permissions (ACLs), which allows local users to gain privileges by replacing critical programs with malicious ones, as demonstrated using VetMsg.exe.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: etrust_ez_antivirus
References: http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter, http://www.idefense.com/application/poi/display?id=164, https://exchange.xforce.ibmcloud.com/vulnerabilities/18502
CVE-2004-0129
Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpmyadmin
References: http://marc.info/?l=bugtraq&m=107582619125932&w=2, http://secunia.com/advisories/10769, http://security.gentoo.org/glsa/glsa-200402-05.xml
CVE-2004-0986
Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel, debian_linux, fedora_core, suse_iptables
References: http://rpmfind.net/linux/RPM/suse/updates/9.2/i386/rpm/i586/iptables-1.2.11-4.2.i586.html, http://www.ciac.org/ciac/bulletins/p-026.shtml, http://www.debian.org/security/2004/dsa-580
CVE-2004-1376
Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=110461358930103&w=2, http://secunia.com/advisories/13704, http://www.7a69ezine.org/node/view/176
CVE-2004-0648
Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: thunderbird, mozilla, firefox
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023573.html, http://marc.info/?l=bugtraq&m=108938712815719&w=2, http://secunia.com/advisories/12027
CVE-2004-2581
Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ichain
References: http://secunia.com/advisories/12366, http://securitytracker.com/id?1011074, http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm
CVE-2004-1950
phpBB 2.0.8a and earlier trusts the IP address that is in the X-Forwarded-For in the HTTP header, which allows remote attackers to spoof IP addresses.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=108239864203144&w=2, http://marc.info/?l=bugtraq&m=108241122908409&w=2, http://secunia.com/advisories/11434
CVE-2004-2592
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a modified client that asks the server to send data stored at a negative array offset, which is not handled when processing Configstrings and Baselines.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quake_ii_server
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html, http://secunia.com/advisories/13013, http://secur1ty.net/advisories/001
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-0989
Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux, command_line_xml_toolkit, libxml2, fedora_core, libxml
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000890, http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html, http://marc.info/?l=bugtraq&m=109880813013482&w=2
CVE-2004-1133
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remote attackers to inject arbitrary HTML and web script via (1) HTTP headers such as "Connection" or (2) invalid parameters whose values are echoed in the resulting error message.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: w3who.dll
References: http://marc.info/?l=full-disclosure&m=110234486823233&w=2, http://www.exaprobe.com/labs/advisories/esa-2004-1206.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18375
CVE-2004-0536
Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tripwire
References: http://marc.info/?l=bugtraq&m=108627481507249&w=2, http://marc.info/?l=bugtraq&m=108630983009228&w=2, http://security.gentoo.org/glsa/glsa-200406-02.xml
CVE-2004-2065
DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension or . in the filename.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dansguardian
References: http://dansguardian.org/?page=history, http://marc.info/?l=bugtraq&m=109113126217408&w=2, http://secunia.com/advisories/12191
CVE-2004-2524
clogin.php in Benchmark Designs' WHM AutoPilot 2.4.5 and earlier allows remote attackers to obtain plaintext username and password credentials by using the clogin_e and base64_encode functions to encode the desired user ID in the c parameter, then read the plaintext values in the resulting form.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: whm_autopilot
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1310.html, http://secunia.com/advisories/12200, http://securitytracker.com/id?1010833
CVE-2004-0595
The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: converged_communications_server, secure_linux, s8500, integrated_management, s8700
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847, http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023909.html, http://marc.info/?l=bugtraq&m=108981780109154&w=2
CVE-2004-1453
GNU glibc 2.3.4 before 2.3.4.20040619, 2.3.3 before 2.3.3.20040420, and 2.3.2 before 2.3.2-r10 does not restrict the use of LD_DEBUG for a setuid program, which allows local users to gain sensitive information, such as the list of symbols used by the program.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: glibc
References: http://bugs.gentoo.org/show_bug.cgi?id=59526, http://secunia.com/advisories/12306, http://www.gentoo.org/security/en/glsa/glsa-200408-16.xml
CVE-2004-0993
Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sockd
References: http://secunia.com/advisories/13371/, http://www.debian.org/security/2004/dsa-604, http://www.securityfocus.com/bid/11800
CVE-2004-0251
Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other users via the query parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: rxgoogle.cgi
References: http://marc.info/?l=bugtraq&m=107594183924958&w=2, http://www.securityfocus.com/bid/9575, https://exchange.xforce.ibmcloud.com/vulnerabilities/15043
CVE-2004-1228
The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: sugar_sales
References: http://marc.info/?l=bugtraq&m=110295433323795&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18449, http://marc.info/?l=bugtraq&m=110295433323795&w=2
CVE-2004-1630
Cross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: work_flow_engine
References: http://marc.info/?l=bugtraq&m=109876304705234&w=2, http://secunia.com/advisories/12970, http://www.securityfocus.com/bid/11514
CVE-2004-1487
wget 1.8.x and 1.9.x allows a remote malicious web server to overwrite certain files via a redirection URL containing a ".." that resolves to the IP address of the malicious server, which bypasses wget's filtering for ".." sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: wget
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755, http://marc.info/?l=bugtraq&m=110269474112384&w=2, http://securitytracker.com/id?1012472
CVE-2004-2531
X.509 Certificate Signature Verification in Gnu transport layer security library (GnuTLS) 1.0.16 allows remote attackers to cause a denial of service (CPU consumption) via certificates containing long chains and signed with large RSA keys.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: gnutls
References: http://lists.gnupg.org/pipermail/gnutls-dev/2004-August/000703.html, http://secunia.com/advisories/12156, http://securitytracker.com/id?1010838
CVE-2004-1369
The TNS Listener in Oracle 10g allows remote attackers to cause a denial of service (listener crash) via a malformed service_register_NSGR request containing a value that is used as an invalid offset for a pointer that references incorrect memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, oracle10g, oracle8i
References: http://marc.info/?l=bugtraq&m=110382524401468&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.kb.cert.org/vuls/id/316206
CVE-2004-2515
Format string vulnerability in VMware Workstation 4.5.2 build-8848, if running with elevated privileges, might allow local users to execute arbitrary code via format string specifiers in command line arguments. NOTE: it is not clear if there are any default or typical circumstances under which VMware would be running with privileges beyond those already available to the attackers, so this might not be a vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: workstation
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1320.html, http://www.osvdb.org/12169, http://www.securityfocus.com/bid/11737
CVE-2004-0350
SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: spidersales
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html, http://marc.info/?l=bugtraq&m=107833097705486&w=2, http://www.s-quadra.com/advisories/Adv-20040303.txt
CVE-2004-2051
The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: thintune_xm, thintune_xs, thintune_mobile, thintune_extreme, thintune_s
References: http://marc.info/?l=bugtraq&m=109068491801021&w=2, http://secunia.com/advisories/12154, http://securitytracker.com/id?1010770
CVE-2004-1655
Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) CM_pid parameter in the comments module or (2) the subject or message fields in the notes module.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpwebsite
References: http://marc.info/?l=bugtraq&m=109413493005513&w=2, http://secunia.com/advisories/12438, http://securitytracker.com/id?1011120
CVE-2004-0249
PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phpx
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0154.html, http://marc.info/?l=bugtraq&m=107586932324901&w=2, http://secunia.com/advisories/10797/
CVE-2004-1378
The expat XML parser code, as used in the open source Jabber (jabberd) 1.4.3 and earlier, jadc2s 0.9.0 and earlier, and possibly other packages, allows remote attackers to cause a denial of service (application crash) via a malformed packet to a socket that accepts XML connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jadc2s, jabberd
References: http://devel.amessage.info/jabberd14/, http://mail.jabber.org/pipermail/jabberd/2004-September/002004.html, http://marc.info/?l=bugtraq&m=109583829122679&w=2
CVE-2004-1114
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: skype
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028852.html, http://marc.info/?l=bugtraq&m=110062240706017&w=2, http://marc.info/?l=bugtraq&m=110067029422696&w=2
CWE: CWE-119
CVE-2004-2244
The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and earlier, and Release 1 1.0.2.2 and 1.0.2.2.2, and Database Server Release 2 9.2.0.1 and later, allows remote attackers to cause a denial of service (CPU and memory consumption) via a SOAP message containing a crafted DTD.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: application_server, oracle9i
References: http://otn.oracle.com/deploy/security/pdf/2004alert65.pdf, http://secunia.com/advisories/10936, http://www.osvdb.org/4011
CVE-2004-0926
Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x_server, mac_os_x, cups
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html, http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html, http://www.securityfocus.com/bid/11322
CVE-2004-0425
Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sideminder_affiliate_agent
References: http://www.atstake.com/research/advisories/2004/a042204-1.txt, http://www.securityfocus.com/bid/10198, https://exchange.xforce.ibmcloud.com/vulnerabilities/15950
CVE-2004-2198
account.asp in DUware DUclassmate 1.0 through 1.1 allows remote attackers to change the passwords for arbitrary users by modifying the MM_recordId parameter on the "My Account" page.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: duclassmate
References: http://www.osvdb.org/10663, http://www.securityfocus.com/bid/11363, http://www.securitytracker.com/alerts/2004/Oct/1011597.html
CVE-2004-2122
Cross-site scripting (XSS) vulnerability in intraforum_db.cgi in Intra Forum allows remote attackers to inject arbitrary web script or HTML via the (1) use_last_read or (2) forum parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: intra_forum
References: http://marc.info/?l=bugtraq&m=107497803617071&w=2, http://www.securitytracker.com/id?1008839, https://exchange.xforce.ibmcloud.com/vulnerabilities/14933
CVE-2004-2052
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thintune
References: http://marc.info/?l=bugtraq&m=109068491801021&w=2, http://marc.info/?l=bugtraq&m=109068491801021&w=2
CVE-2004-1853
Buffer overflow in Terminator 3: War of the Machines 1.0 allows remote attackers to cause a denial of service via a long ServerInfo variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: terminator_3_war_of_the_machines
References: http://aluigi.altervista.org/adv/t3cbof-adv.txt, http://marc.info/?l=bugtraq&m=108016076221855&w=2, http://secunia.com/advisories/11182
CVE-2004-0573
Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: publisher, word, frontpage, works, office
References: http://marc.info/?l=bugtraq&m=109519646030906&w=2, http://secunia.com/advisories/12529, http://securitytracker.com/id?1011249
CVE-2004-0607
The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, racoon, ipsec-tools, enterprise_linux_desktop
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt, http://marc.info/?l=bugtraq&m=108726102304507&w=2, http://marc.info/?l=bugtraq&m=108731967126033&w=2
CVE-2004-1414
Gadu-Gadu 6.1 build 156 allows remote attackers to cause a denial of service (application hang) via a message that contains many special strings that are converted to images.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=110357519312200&w=2, http://www.soltysiak.com/gg-dos.txt, http://marc.info/?l=bugtraq&m=110357519312200&w=2
CVE-2004-2188
Cross-site scripting (XSS) vulnerability in DMXReady Site Chassis Manager allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: dmxready_site_chassis_manager
References: http://www.maxpatrol.com/advdetails.asp?id=10, http://www.maxpatrol.com/mp_advisory.asp, http://www.securityfocus.com/bid/11434
CVE-2004-1688
Pigeon Server 3.02.0143 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a long login name sent to port 3103.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pigeon_server
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026515.html, http://marc.info/?l=bugtraq&m=109543366631724&w=2, http://secunia.com/advisories/12585
CVE-2004-0841
Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: s3400, modular_messaging_message_storage_server, internet_explorer, s8100, definity_one_media_server
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0498.html, http://secunia.com/advisories/12048, http://securitytracker.com/id?1010679
CVE-2004-0663
Cross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary script or HTML via the (1) id parameter to the (a) private_messages module; (2) search parameter to the (b) links and (c) content modules; and (3) files parameter to the gallery module.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: powerportal
References: http://marc.info/?l=bugtraq&m=108844362627811&w=2, http://www.swp-zone.org/archivos/advisory-07.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/16528
CVE-2004-0188
Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: calife
References: http://marc.info/?l=bugtraq&m=107789737832092&w=2, http://www.debian.org/security/2004/dsa-461, http://www.securityfocus.com/bid/9756
CVE-2004-2765
Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: enterprise_linux, iplanet_messaging_server, one_messaging_server, solaris
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-56-1, http://sunsolve.sun.com/search/document.do?assetkey=1-66-201601-1, http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-56-1
CWE: CWE-79
CVE-2004-0958
php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0053.html, http://marc.info/?l=bugtraq&m=109527531130492&w=2, http://secunia.com/advisories/12560/
CVE-2004-1944
Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multipart MIME message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: eudora
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020075.html, http://marc.info/?l=bugtraq&m=108241694627321&w=2, http://secunia.com/advisories/11360
CVE-2004-1021
iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ical
References: http://lists.apple.com/archives/security-announce//2004/Nov/msg00000.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18209, http://lists.apple.com/archives/security-announce//2004/Nov/msg00000.html
CVE-2004-1281
The ftp_retr function in junkie 0.3.1 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in a filename.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: junkie_ftp_client
References: http://tigger.uic.edu/~jlongs2/holes/junkie.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18568, http://tigger.uic.edu/~jlongs2/holes/junkie.txt
CVE-2004-0308
Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: optical_networking_systems_software
References: http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml, http://www.osvdb.org/4010, http://www.securityfocus.com/bid/9699
CVE-2004-2386
Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sercd, sredird
Related CWEs: CWE-134
Related CAPECs: CAPEC-135, CAPEC-67
References: http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd, http://secunia.com/advisories/12351, http://securitytracker.com/id?1011038
CWE: CWE-134
CVE-2004-0746
Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, kde, mandrake_linux, linux, konqueror
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864, http://marc.info/?l=bugtraq&m=109327681304401&w=2, http://secunia.com/advisories/12341