DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-2254
SurgeLDAP 1.0g (Build 12), and possibly other versions before 1.0h, allows remote attackers to bypass authentication for the administration interface via a direct request to admin.cgi with a modified utoken parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: surgeldap
References: http://netwinsite.com/surgeldap/updates.htm, http://secunia.com/advisories/11549, http://securitytracker.com/alerts/2004/May/1010113.html
CVE-2004-0214
Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_explorer, windows_2000, windows_me, windows_xp, windows_98
References: http://seclists.org/lists/bugtraq/2004/Apr/0322.html, http://seclists.org/lists/fulldisclosure/2004/Apr/0933.html, http://secunia.com/advisories/11482/
CVE-2004-2485
Unspecified vulnerability in PHP Live! before 2.8.2, due to a "major security problem," allows remote attackers to include arbitrary files and directories via unspecified attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: php_live
References: http://archives.neohapsis.com/archives/apps/freshmeat/2004-11/0022.html, http://secunia.com/advisories/13420, http://securitytracker.com/id?1012467
CVE-2004-0521
SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: propack, squirrelmail
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858, http://marc.info/?l=squirrelmail-cvs&m=108309375029888
CVE-2004-2159
Multiple buffer overflows in XMLStarlet Command Line XML Toolkit 0.9.3 have unknown impact and attack vectors via (1) xml_elem.c and (2) xml_select.c.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: command_line_xml_toolkit
References: http://securitytracker.com/id?1011496, http://sourceforge.net/project/shownotes.php?release_id=268962, http://www.osvdb.org/10074
CVE-2004-2338
OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd
References: http://www.openbsd.org/errata33.html, http://www.openbsd.org/errata34.html, http://www.securityfocus.com/bid/9867
CVE-2004-2676
The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: spy_sweeper_enterprise
References: http://secunia.com/advisories/13187, http://secunia.com/secunia_research/2004-14/advisory/, http://securitytracker.com/id?1012652
CVE-2004-1366
Oracle 10g Database Server stores the password for the SYSMAN account in cleartext in the world-readable emoms.properties file, which could allow local users to gain DBA privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, oracle10g, oracle8i
Related CWEs: CWE-255
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.kb.cert.org/vuls/id/316206, http://www.ngssoftware.com/advisories/oracle23122004D.txt
CWE: CWE-255
CVE-2004-2437
SQL injection vulnerability in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the rowstart parameter to (1) index.php or (2) members.php, or (3) the comment_id parameter to comments.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php_fusion
References: http://secunia.com/advisories/12686/, http://www.osvdb.org/10437, http://www.osvdb.org/10438
CVE-2004-0530
The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux
References: http://secunia.com/advisories/11760, http://www.securityfocus.com/bid/10461, http://www.slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.419765
CVE-2004-1091
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by triggering a null dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, midnight_commander, debian_linux, suse_linux, linux
References: http://secunia.com/advisories/13863, http://www.debian.org/security/2005/dsa-639, http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE-2004-1701
Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cfengine
References: http://marc.info/?l=bugtraq&m=109208394910086&w=2, http://marc.info/?l=bugtraq&m=110886670528775&w=2, http://secunia.com/advisories/12251
CVE-2004-2649
Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters (e.g. spaces coded as "&#32") in the middle of the URL.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Products: eudora
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0066.html, http://secunia.com/advisories/11581, http://securitytracker.com/alerts/2004/May/1010117.html
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-2678
Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) with Certificates, allows remote attackers to gain privileges via unknown attack vectors.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: tru64
References: http://archives.neohapsis.com/archives/tru64/2004-q1/0004.html, http://securitytracker.com/id?1009329, http://www.securityfocus.com/bid/9803
CVE-2004-2595
Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quake_ii_server_linux
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html, http://secunia.com/advisories/13013, http://secur1ty.net/advisories/001
CVE-2004-2331
ColdFusion MX 6.1 and 6.1 J2EE allows local users to bypass sandbox security restrictions and obtain sensitive information by using Java reflection methods to access trusted Java objects without using the CreateObject function or cfobject tag.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: coldfusion
Related CWEs: CWE-470
Related CAPECs: CAPEC-138
References: http://secunia.com/advisories/10743/, http://www.macromedia.com/devnet/security/security_zone/mpsb04-01.html, http://www.securityfocus.com/bid/9521
CWE: CWE-470
CVE-2004-0017
Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgroupware
References: http://secunia.com/advisories/10591, http://www.debian.org/security/2004/dsa-419, http://www.securityfocus.com/bid/9386
CVE-2004-0340
Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wftpd
References: http://marc.info/?l=bugtraq&m=107801208004699&w=2, http://secunia.com/advisories/11001, http://www.securityfocus.com/bid/9767
CVE-2004-2568
Multiple cross-site scripting (XSS) vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: recipants
References: http://secunia.com/advisories/11533, http://securitytracker.com/id?1009984, http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415
CVE-2004-1673
accountsettings_add.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allow remote attackers to create text files with arbitrary content via the accountid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_mail
References: http://marc.info/?l=bugtraq&m=109483971420067&w=2, http://secunia.com/advisories/12789, http://www.securityfocus.com/bid/11371
CVE-2004-2777
GE Healthcare Centricity Image Vault 3.x has a password of (1) gemnet for the administrator account, (2) webadmin for the webadmin administrator account of the ASACA DVD library, (3) an empty value for the gemsservice account of the Ultrasound Database, and possibly (4) gemnet2002 for the gemnet2002 account of the GEMNet license server, which has unspecified impact and attack vectors.  NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a fixed value.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: centricity_image_vault_firmware
Related CWEs: CWE-255
References: http://apps.gehealthcare.com/servlet/ClientServlet/2010564-002E.pdf?REQ=RAA&DIRECTION=2010564-002&FILENAME=2010564-002E.pdf&FILEREV=E&DOCREV_ORG=E, http://www.forbes.com/sites/thomasbrewster/2015/07/10/vulnerable-breasts/, https://ics-cert.us-cert.gov/advisories/ICSMA-18-037-02
CWE: CWE-255
CVE-2004-1012
The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux, cyrus_imap_server, linux, openpkg, fedora_core
References: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143, http://asg.web.cmu.edu/cyrus/download/imapd/changes.html, http://marc.info/?l=bugtraq&m=110123023521619&w=2
CVE-2004-1276
IglooFTP 0.6.1, when recursively uploading a directory, allows local users to overwrite the files that are being uploaded by creating temporary files with names generated by the tmpnam function, before the files are opened by IglooFTP.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: iglooftp
References: http://tigger.uic.edu/~jlongs2/holes/iglooftp.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18632, http://tigger.uic.edu/~jlongs2/holes/iglooftp.txt
CVE-2004-2158
SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter to (1) exit.php or (2) comment.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: serendipity
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026955.html, http://secunia.com/advisories/12673/, http://securitytracker.com/id?1011448
CVE-2004-2007
Cross-site scripting (XSS) vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to inject arbitrary HTML or web script via the (1) cat parameter in a CatView function or (2) jokeid parameter in a JokeView function.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: nukejokes
References: http://marc.info/?l=bugtraq&m=108404714232579&w=2, http://www.securityfocus.com/bid/10306, http://www.waraxe.us/index.php?modname=sa&id=28
CVE-2004-1129
SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cmailserver
References: http://marc.info/?l=bugtraq&m=110137313329955&w=2, http://www.security.org.sg/vuln/cmailserver52.html, http://www.securityfocus.com/bid/11742
CVE-2004-2267
Cross-site scripting (XSS) vulnerability in Ansel 2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via the album name.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ansel
References: http://secunia.com/advisories/12856, http://secunia.com/secunia_research/2004-17/advisory/, http://securitytracker.com/id?1012434
CVE-2004-0845
Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: ie, internet_explorer
References: http://marc.info/?l=bugtraq&m=109770364504803&w=2, http://www.acrossecurity.com/aspr/ASPR-2004-10-13-1-PUB.txt, http://www.kb.cert.org/vuls/id/795720
CVE-2004-2119
Cross-site scripting (XSS) vulnerability in Tiny Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: tinyserver
References: http://marc.info/?l=bugtraq&m=107496530806730&w=2, http://secunia.com/advisories/10707, http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt
CVE-2004-2457
Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service (crash) via a large amount of UDP traffic.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 3crwe754g72-a
References: http://www.osvdb.org/11839, http://www.securityfocus.com/bid/11685, https://exchange.xforce.ibmcloud.com/vulnerabilities/18081
CVE-2004-2609
The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain sensitive information (an unencrypted password for a Windows domain account) via four "stuffit /f:stuffit.dat" invocations, possibly due to a buffer overflow.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: powerquest_deploycenter
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1180.html, http://securitytracker.com/id?1011081, http://www.osvdb.org/9276
CVE-2004-2103
Cross-site scripting (XSS) vulnerability in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to process arbitrary script or HTML as other users via (1) a malformed request for a Perl program with script in the filename, (2) the User.id parameter to the webacc servlet, (3) the GWAP.version parameter to webacc, or (4) a URL request for a .bas file with script in the filename.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: netware
References: http://marc.info/?l=bugtraq&m=107487862304440&w=2, http://support.novell.com/cgi-bin/search/searchtid.cgi?/10091529.htm, http://www.osvdb.org/4949
CVE-2004-1014
statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, debian_linux, mandrake_linux, mandrake_linux_corporate_server, nfs-utils
References: http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup, http://www.debian.org/security/2004/dsa-606, http://www.redhat.com/support/errata/RHSA-2004-583.html
CVE-2004-2371
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: desert_siege, the_sum_of_all_fears, ghost_recon
References: http://aluigi.altervista.org/adv/grboom-adv.txt, http://www.securityfocus.com/archive/1/355051, http://www.securityfocus.com/bid/9738
CVE-2004-2588
Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain sensitive information such as the configuration of the web server and the PHP application.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xmb_forum
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html, http://marc.info/?l=bugtraq&m=108032355905265&w=2, http://securitytracker.com/id?1009561
CVE-2004-1255
Buffer overflow in the expandtabs function in 2fax 3.04 allows remote attackers to execute arbitrary code via a text file that is converted to TIFF.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: 2fax
References: http://tigger.uic.edu/~jlongs2/holes/2fax.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/10901, http://tigger.uic.edu/~jlongs2/holes/2fax.txt
CVE-2004-1897
Administration interface in Monit 1.4 through 4.2 allows remote attackers to cause a denial of service (segmentation fault) by sending a Basic Authentication request without a password, which causes Monit to decrement a null pointer and perform an out-of-bounds read.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: monit
References: http://marc.info/?l=bugtraq&m=108119149103696&w=2, http://secunia.com/advisories/11304, http://www.securityfocus.com/bid/10051
CVE-2004-0835
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, mysql
References: http://bugs.mysql.com/bug.php?id=3270, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892, http://lists.mysql.com/internals/13073
CVE-2004-0081
OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: propack, edirectory, s8500, pix_firewall, openssl
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt, ftp://patches.sgi.com/support/free/security/advisories/20040304-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
CVE-2004-0259
The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting (XSS) issue.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: formmail.php
References: http://marc.info/?l=bugtraq&m=107619109629629&w=2, http://www.securityfocus.com/bid/9591, https://exchange.xforce.ibmcloud.com/vulnerabilities/15079
CVE-2004-1478
JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to perform a session fixation attack and hijack a user's HTTP session.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coldfusion, cosminexus_enterprise, jrun, cosminexus_server
References: http://marc.info/?l=bugtraq&m=109621995623823&w=2, http://secunia.com/advisories/12638/, http://www.kb.cert.org/vuls/id/584958
CVE-2004-1980
Directory traversal vulnerability in glossary.php in PROPS 0.6.1 allows remote attackers to view arbitrary files via a .. (dot dot) in (1) module or (2) format variables.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: props
References: http://marc.info/?l=bugtraq&m=108342671616155&w=2, http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433, https://exchange.xforce.ibmcloud.com/vulnerabilities/16036
CVE-2004-2041
PHP remote file inclusion vulnerability in secure_img_render.php in e107 0.615 allows remote attackers to execute arbitrary PHP code by modifying the p parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: e107
References: http://marc.info/?l=bugtraq&m=108588043007224&w=2, http://marc.info/?l=full-disclosure&m=108586723116427&w=2, http://secunia.com/advisories/11740
CVE-2004-0397
Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: subversion
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021737.html, http://marc.info/?l=bugtraq&m=108498676517697&w=2, http://secunia.com/advisories/11642
CVE-2004-2123
Multiple cross-site scripting (XSS) vulnerabilities in Nextplace.com E-Commerce ASP Engine allow remote attackers to inject arbitrary web script or HTML via the (1) level parameter of productdetail.asp, (2) searchKey parameter of searchresults.asp, and possibly (3) level parameter of ListCategories.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: e-commerce_asp_engine
References: http://marc.info/?l=bugtraq&m=107513601805018&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/14952, http://marc.info/?l=bugtraq&m=107513601805018&w=2
CVE-2004-2312
Buffer overflow in GNU make for IBM AIX 4.3.3, when installed setgid, allows local users to gain privileges via a long CC argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0997.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1124.html, http://secunia.com/advisories/11158/
CVE-2004-2725
Multiple cross-site scripting (XSS) vulnerabilities in Aztek Forum 4.0 allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter in (a) search.php, (2) the email parameter in (b) subscribe.php, and (3) the return and (4) title parameters in (c) forum_2.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: aztek_forum
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://secunia.com/advisories/13202, http://securitytracker.com/id?1012213, http://www.osvdb.org/11704
CWE: CWE-79
CVE-2004-0276
The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: monkey
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://aluigi.altervista.org/poc/monkeydos.zip, http://marc.info/?l=bugtraq&m=107652610506968&w=2, http://monkeyd.sourceforge.net/
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-2018
PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arbitrary PHP code by modifying the modpath parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0870.html, http://marc.info/?l=bugtraq&m=108482888621896&w=2, http://secunia.com/advisories/11625
CVE-2004-0956
MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: suse_linux, ubuntu_linux, mysql
References: http://bugs.mysql.com/bug.php?id=3870, http://lists.mysql.com/packagers/202, http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml
CVE-2004-1087
Terminal for Apple Mac OS X 10.3.6 may indicate that "Secure Keyboard Entry" is enabled even when it is not, which could result in a false sense of security for the user.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: quicktime_streaming_server, darwin_streaming_server, mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://secunia.com/advisories/13362/, http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE-2004-1633
process_bug.cgi in Bugzilla 2.9 through 2.18rc2 and 2.19 from CVS does not check edit permissions on the keywords field, which allows remote authenticated users to modify the keywords in a bug via the keywordaction parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: bugzilla
References: http://marc.info/?l=bugtraq&m=109872095201238&w=2, https://bugzilla.mozilla.org/show_bug.cgi?id=252638, https://exchange.xforce.ibmcloud.com/vulnerabilities/17840
CVE-2004-0886
Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, suse_linux, secure_linux, kde, mandrake_linux
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888, http://marc.info/?l=bugtraq&m=109779465621929&w=2, http://secunia.com/advisories/12818
CVE-2004-0945
The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a denial of service (resource exhaustion) via a large number of active sessions, which exceeds ICP's maximum.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mitel_3300_integrated_communication_platform
References: http://www.corsaire.com/advisories/c040817-003.txt, http://www.mitel.com/DocController?documentId=14223, http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en
CVE-2004-0277
Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dream_ftp_server
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016871.html, http://marc.info/?l=bugtraq&m=107656166402882&w=2, http://www.security-protocols.com/modules.php?name=News&file=article&sid=1722
CVE-2004-0572
Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: grpconv
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0290.html, http://www.kb.cert.org/vuls/id/543864, http://www.securityfocus.com/bid/10677
CVE-2004-1523
Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via format string specifiers in a message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hired_team_trial
References: http://marc.info/?l=bugtraq&m=110054260919742&w=2, http://secunia.com/advisories/13207, http://www.securityfocus.com/bid/11683
CVE-2004-2500
Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ilohamail
References: http://secunia.com/advisories/13413, http://sourceforge.net/project/shownotes.php?group_id=54027&release_id=288409, http://www.osvdb.org/12292
CVE-2004-2046
Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: powerchute
References: http://marc.info/?l=bugtraq&m=109061480026378&w=2, http://secunia.com/advisories/12124, http://securitytracker.com/id?1010745
CVE-2004-0678
Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: chat_server
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=108904648728706&w=2, http://www.autistici.org/fdonato/advisory/12PlanetChatServer2.9-adv.txt, http://www.securityfocus.com/bid/10659
CWE: CWE-79
CVE-2004-1396
Winamp 5.07 and possibly other versions, allows remote attackers to cause a denial of service (application crash or CPU consumption) via (1) an mp4 or m4a playlist file that contains invalid tag data or (2) an invalid .nsv or .nsa file.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: winamp
References: http://forums.winamp.com/showthread.php?s=&threadid=202007, http://marc.info/?l=bugtraq&m=110297310503541&w=2, http://marc.info/?l=full-disclosure&m=110303988101973&w=2
CVE-2004-2396
passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux_corporate_server, mandrake_multi_network_firewall, mandrake_linux
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060, http://www.mandriva.com/security/advisories?name=MDKSA-2004:045, http://www.securityfocus.com/bid/10370
CVE-2004-0997
Unspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17 allows local users to gain privileges via unknown vectors.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes, http://secunia.com/advisories/20162, http://secunia.com/advisories/20163
CVE-2004-0518
Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html, http://securitytracker.com/id?1010333, https://exchange.xforce.ibmcloud.com/vulnerabilities/16288
CVE-2004-1210
Cross-site scripting (XSS) vulnerability in proxylog.dat in IPCop 1.4.1 and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the (1) url or (2) part variables.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: ipcop
References: http://marc.info/?l=bugtraq&m=110197682705001&w=2, http://www.kurczaba.com/html/security/0411291.htm, http://www.securityfocus.com/bid/11779
CVE-2004-2190
Directory traversal vulnerability in Unzoo 4.4-2 has unknown impact and attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: unzoo
References: http://secunia.com/advisories/12857, http://securitytracker.com/id?1011673, http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-10/0466.html
CVE-2004-2153
Multiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: real_estate_management_software
References: http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html, http://secunia.com/advisories/12721, http://www.osvdb.org/10480
CVE-2004-0356
Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slmail_pro
References: http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf, http://marc.info/?l=bugtraq&m=107850488326232&w=2, http://www.nextgenss.com/advisories/slmailsrc.txt
CVE-2004-1336
The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: tetex-bin, linux
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286370, http://marc.info/?l=bugtraq&m=110383942014839&w=2, http://www.securityfocus.com/bid/12100
CVE-2004-1450
Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locations.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mozilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=239122, http://www.mozilla.org/projects/security/known-vulnerabilities.html, http://bugzilla.mozilla.org/show_bug.cgi?id=239122
CVE-2004-2280
Buffer overflow in IBM Lotus Notes 6.5.x before 6.5.3 and 6.0.x before 6.0.5 allows remote attackers to cause a denial of service (crash) via unknown vectors related to Java applets, as identified by KSPR62F4KN.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lotus_notes
References: http://secunia.com/advisories/12046, http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en, http://www.osvdb.org/8418
CVE-2004-0458
mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mah-jong, debian_linux
Related CWEs: CWE-476
References: http://www.debian.org/security/2004/dsa-503, http://www.securityfocus.com/bid/10343, https://exchange.xforce.ibmcloud.com/vulnerabilities/16143
CWE: CWE-476
CVE-2004-1015
Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ubuntu_linux, cyrus_imap_server, fedora_core
References: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=145, http://asg.web.cmu.edu/cyrus/download/imapd/changes.html, http://security.gentoo.org/glsa/glsa-200411-34.xml
CVE-2004-2598
Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state.  NOTE: the impact of this issue will vary depending on which mod is being used.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: quake_ii_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html, http://secur1ty.net/advisories/001, http://securitytracker.com/id?1011979
CVE-2004-2154
CUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name containing uppercase or lowercase letters that are different from what is specified in the directive.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ubuntu_linux, cups
Related CWEs: CWE-178
References: http://www.cups.org/str.php?L700, http://www.novell.com/linux/security/advisories/2005_18_sr.html, http://www.redhat.com/support/errata/RHSA-2005-571.html
CWE: CWE-178
CVE-2004-2460
Unknown vulnerability in POP3 in gnubiff before 2.0.0 allows remote attackers to cause a denial of service (application crash) via an "infinite" Unique IDentification Listing (UIDL) list.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gnubiff
References: http://gnubiff.sourceforge.net/changelog.php, http://secunia.com/advisories/12445, http://www.osvdb.org/9731
CVE-2004-0793
The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsdmainutils
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=109396230317359&w=2, http://www.securityfocus.com/bid/11077, https://exchange.xforce.ibmcloud.com/vulnerabilities/17162
CWE: CWE-264
CVE-2004-1183
Integer overflow in the tiffdump utility for libtiff 3.7.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted TIFF file.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: libtiff
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920, http://marc.info/?l=bugtraq&m=110503635113419&w=2, http://secunia.com/advisories/13728/
CVE-2004-1987
picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke, coppermine_photo_gallery
References: http://marc.info/?l=bugtraq&m=108360247732014&w=2, http://secunia.com/advisories/11524, http://securitytracker.com/id?1010001
CVE-2004-0448
Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jftpgw
References: http://www.debian.org/security/2004/dsa-510, http://www.securityfocus.com/bid/10438, https://exchange.xforce.ibmcloud.com/vulnerabilities/16271
CVE-2004-0496
Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, suse_email_server, mandrake_multi_network_firewall, suse_linux_connectivity_server, linux
References: http://www.novell.com/linux/security/advisories/2004_20_kernel.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/16625, http://www.novell.com/linux/security/advisories/2004_20_kernel.html
CVE-2004-1451
Mozilla before 1.6 does not display the entire URL in the status bar when a link contains %00, which could allow remote attackers to trick users into clicking on unknown or untrusted sites and facilitate phishing attacks.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: mozilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=228176, http://secunia.com/advisories/10419/, http://www.mozilla.org/projects/security/known-vulnerabilities.html
CVE-2004-0917
The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: application_portal
References: http://securitytracker.com/id?1011447, http://www.atstake.com/research/advisories/2004/a092804-1.txt, http://www.securityfocus.com/bid/11267
CVE-2004-0637
Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: oracle8i, oracle9i
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://secunia.com/advisories/12409/, http://www.idefense.com/application/poi/display?id=136&type=vulnerabilities&flashstatus=true, http://www.kb.cert.org/vuls/id/316206
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2004-1079
Buffer overflow in (1) ncplogin and (2) ncpmap in nwclient.c for ncpfs 2.2.4, and possibly other versions, may allow local users to gain privileges via a long -T option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ncpfs
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029563.html, http://marc.info/?l=bugtraq&m=110175523207437&w=2, http://www.gentoo.org/security/en/glsa/glsa-200412-09.xml
CVE-2004-2529
Gadu-Gadu allows remote attackers to bypass the "image send" option by sending a very small image file, which could be used in conjunction with image-related vulnerabilities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=110295777306493&w=2, http://secunia.com/advisories/13450, http://www.man.poznan.pl/~security/gg-adv.txt
CVE-2004-2212
SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL commands via the forum_id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: alivesites_forum
References: http://secunia.com/advisories/12844, http://www.maxpatrol.com/advdetails.asp?id=5, http://www.maxpatrol.com/mp_advisory.asp
CVE-2004-2165
Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service (crash from unallocated memory write) via a long user nickname.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lords_of_the_realm_iii
References: http://aluigi.altervista.org/adv/lotr3boom-adv.txt, http://seclists.org/lists/fulldisclosure/2004/Sep/0660.html, http://secunia.com/advisories/12589/
CVE-2004-0771
Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lha
References: http://bugs.gentoo.org/show_bug.cgi?id=51285, http://marc.info/?l=bugtraq&m=108668791510153, http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml
CVE-2004-2655
rdesktop 1.3.1 with xscreensaver 4.14, and possibly other versions, when running on Fedora and possibly other platforms, does not release the keyboard focus when xscreensaver starts, which causes the password to be entered into the active window when the user unlocks the screen.
CVSS v2.0 Score: 5.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:N/A:N
Affected Products: xscreensaver
References: ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc, http://secunia.com/advisories/20226, http://secunia.com/advisories/20456
CVE-2004-0124
The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: windows_2000, windows_nt, windows_xp, windows_2003_server
References: http://secunia.com/advisories/11065/, http://www.ciac.org/ciac/bulletins/o-115.shtml, http://www.kb.cert.org/vuls/id/212892
CVE-2004-1410
Cross-site scripting (XSS) vulnerability in Gadu-Gadu build 155 and earlier allows remote attackers to inject arbitrary web script via a URL, which is echoed in a popup window that displays a parsing error message, a different vulnerability than CVE-2004-1229.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=110330741828726&w=2, http://secunia.com/advisories/13450, http://www.osvdb.org/12524
CVE-2004-0581
ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mandrake_linux_corporate_server, ksymoops, mandrake_linux
References: http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:060, http://www.securityfocus.com/bid/10516, https://exchange.xforce.ibmcloud.com/vulnerabilities/16392