DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0891
Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gaim, ubuntu_linux, slackware_linux, linux
References: http://gaim.sourceforge.net/security/?id=9, http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml, http://www.redhat.com/support/errata/RHSA-2004-604.html
CVE-2004-0674
Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service (crash) via a packet with the IP record route option set.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xsr-3000, xsr-1850, xsr-1805
References: http://marc.info/?l=bugtraq&m=108886995627906&w=2, http://www.enterasys.com/support/security/incidents/2004/07/11036.html, http://www.securityfocus.com/bid/10653
CVE-2004-0751
The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-09/0096.html, http://issues.apache.org/bugzilla/show_bug.cgi?id=30134, http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml
CVE-2004-1867
Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via the Name field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: fresh_guest_book
References: http://marc.info/?l=bugtraq&m=108057935827431&w=2, http://www.securityfocus.com/bid/9995, https://exchange.xforce.ibmcloud.com/vulnerabilities/15649
CVE-2004-0952
HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: hp-ux
References: http://marc.info/?l=bugtraq&m=112420609211136&w=2, http://marc.info/?l=bugtraq&m=112422597529112&w=2, http://secunia.com/advisories/16456/
CVE-2004-1284
Buffer overflow in the find_next_file function in playlist.c for mpg123 0.59r allows remote attackers to execute arbitrary code via a crafted MP3 playlist.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mpg123
References: http://tigger.uic.edu/~jlongs2/holes/mpg123.txt, http://www.novell.com/linux/security/advisories/2005_01_sr.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18626
CVE-2004-2632
phpMyAdmin 2.5.1 up to 2.5.7 allows remote attackers to modify configuration settings and gain unauthorized access to MySQL servers via modified $cfg['Servers'] variables.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpmyadmin
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0444.html, http://archives.neohapsis.com/archives/bugtraq/2004-06/0473.html, http://eagle.kecapi.com/sec/fd/phpMyAdmin.html
CVE-2004-2097
Multiple scripts on SuSE Linux 9.0 allow local users to overwrite arbitrary files via a symlink attack on (1) /tmp/fvwm-bug created by fvwm-bug, (2) /tmp/wmmenu created by wm-oldmenu2new, (3) /tmp/rates created by x11perfcomp, (4) /tmp/xf86debug.1.log created by xf86debug, (5) /tmp/.winpopup-new created by winpopup-send.sh, or (6) /tmp/initrd created by lvmcreate_initrd.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: suse_linux
References: http://marc.info/?l=bugtraq&m=107461582413923&w=2, http://marc.info/?l=bugtraq&m=107478920006258&w=2, http://securitytracker.com/id?1008781
CVE-2004-0264
palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jim_rees_httpd, palmhttpd
References: http://marc.info/?l=bugtraq&m=107634638201570&w=2, http://www.securityfocus.com/bid/9608, https://exchange.xforce.ibmcloud.com/vulnerabilities/15090
CVE-2004-0014
Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nd
References: http://secunia.com/advisories/10549, http://secunia.com/advisories/10550, http://www.debian.org/security/2004/dsa-412
CVE-2004-2164
shoprestoreorder.asp in VP-ASP 5.0 does not close the database connection when a user restores a previous order, which allows remote attackers to cause a denial of service (connection consumption).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vp-asp
References: http://secunia.com/advisories/12611, http://www.osvdb.org/10071, http://www.securityfocus.com/bid/11228
CVE-2004-2093
Buffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long RSYNC_PROXY environment variable.  NOTE: since rsync is not setuid, this issue does not provide any additional privileges beyond those that are already available to the user.  Therefore this issue may be REJECTED in the future.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rsync
References: http://archives.neohapsis.com/archives/vuln-dev/2004-q1/0091.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15108, http://archives.neohapsis.com/archives/vuln-dev/2004-q1/0091.html
CVE-2004-0476
Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet loss) via a long string containing Telnet escape characters to the Telnet port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 3cp4144
References: http://secunia.com/advisories/11716, http://www.idefense.com/application/poi/display?id=105&type=vulnerabilities, http://www.securityfocus.com/bid/10419
CVE-2004-0670
Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot) via a long password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: prestige
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023196.html, http://marc.info/?l=bugtraq&m=108862133005952&w=2, http://www.securityfocus.com/bid/10638
CVE-2004-1940
sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value that causes an out-of-bounds read.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kphone
Related CWEs: CWE-125
Related CAPECs: CAPEC-540
References: http://marc.info/?l=bugtraq&m=108244325924859&w=2, http://www.securiteam.com/unixfocus/5PP0B1FCLY.html, http://www.securityfocus.com/bid/10159
CWE: CWE-125
CVE-2004-1331
The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: ie, internet_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2004-11/0260.html, http://secunia.com/advisories/13203/, http://securityreason.com/securityalert/3220
CVE-2004-1860
Buffer overflow in Check Point SmartDashboard in Check Point NG AI R54 and R55 allows remote authenticated users to cause a denial of service (server disconnect) and possibly execute arbitrary code via a large filter on a column when using SmartView Tracker.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xmb
References: http://marc.info/?l=bugtraq&m=108023281112510&w=2, http://securitytracker.com/id?1009490, http://www.osvdb.org/4412
CVE-2004-0744
The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt, http://marc.info/?l=bugtraq&m=108075899619193&w=2, http://marc.info/?l=bugtraq&m=108308604119618&w=2
CVE-2004-1612
Directory traversal vulnerability in SalesLogix 6.1 allows remote attackers to upload arbitrary files via a .. (dot dot) in a ProcessQueueFile request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: saleslogix
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html, http://marc.info/?l=bugtraq&m=109811852218478&w=2, http://secunia.com/advisories/12883
CVE-2004-0008
Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim, ultramagnetic
References: ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc, http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html
CVE-2004-1839
MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1) browsers.php, (2) mstrack.php, or (3) title.php, which reveal the full path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108006319730976&w=2, http://www.securityfocus.com/bid/9946, http://marc.info/?l=bugtraq&m=108006319730976&w=2
CVE-2004-2120
Reptile Web Server allows remote attackers to cause a denial of service (CPU consumption) via multiple incomplete GET requests without the HTTP version.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: reptile_web_server
References: http://marc.info/?l=bugtraq&m=107497355713434&w=2, http://securitytracker.com/id?1008842, http://www.autistici.org/fdonato/advisory/reptilewsDailyVersion-adv.txt
CVE-2004-2176
The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_xp
References: http://www.securityfocus.com/archive/1/378508, http://www.securityfocus.com/bid/11410, http://www.securityfocus.com/archive/1/378508
CVE-2004-0969
The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux, ubuntu_linux, groff
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136313, http://secunia.com/advisories/18764, http://www.gentoo.org/security/en/glsa/glsa-200411-15.xml
CVE-2004-1231
Directory traversal vulnerability in Gadu-Gadu allows remote attackers to read arbitrary files via .. (dot dot) sequences in a DCC connection with a CTCP packet that contains a 1 as the type and a 4 as the subtype.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=110295777306493&w=2, http://www.man.poznan.pl/~security/gg-adv.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18461
CVE-2004-1845
Multiple cross-site scripting (XSS) vulnerabilities in News Manager Lite 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to comment_add.asp, (2) search parameter to search.asp, or (3) n parameter to category_news_headline.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: news_manager_lite
References: http://marc.info/?l=bugtraq&m=107999733503496&w=2, http://secunia.com/advisories/11180, http://securitytracker.com/id?1009507
CVE-2004-2200
Cross-site scripting (XSS) vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to inject arbitrary web script or HTML via via the message text.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: duforum
References: http://www.osvdb.org/10667, http://www.securityfocus.com/bid/11363, http://www.securitytracker.com/alerts/2004/Oct/1011595.html
CVE-2004-1949
SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset parameter to changeinfo.php in the Your_Account module.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postnuke
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020154.html, http://marc.info/?l=bugtraq&m=108256503718978&w=2, http://news.postnuke.com/Article2580.html
CVE-2004-0869
Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ie
References: http://securityfocus.com/archive/1/375407, http://securitytracker.com/id?1011332, http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt
CVE-2004-0649
Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: l2tpd, linux
References: http://marc.info/?l=bugtraq&m=108640917925735&w=2, http://security.gentoo.org/glsa/glsa-200407-17.xml, http://www.debian.org/security/2004/dsa-530
CVE-2004-1982
Post.pl in YaBB 1 Gold SP 1.2 allows remote attackers to modify records in the board's .txt file via carriage return characters in the subject field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: yabb
References: http://marc.info/?l=bugtraq&m=108360430703935&w=2, http://secunia.com/advisories/12609, http://www.securityfocus.com/bid/10263
CVE-2004-0327
Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via ..  (dot dot) sequences in the clang parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpnewsmanager
References: http://marc.info/?l=bugtraq&m=107772470111000&w=2, http://www.securityfocus.com/bid/9720, http://www.zone-h.org/advisories/read/id=4024
CVE-2004-1333
Integer overflow in the vc_resize function in the Linux kernel 2.4 and 2.6 before 2.6.10 allows local users to cause a denial of service (kernel crash) via a short new screen value, which leads to a buffer overflow.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, fedora_core, linux
References: http://secunia.com/advisories/17826, http://secunia.com/advisories/20162, http://secunia.com/advisories/20163
CVE-2004-1510
WebCalendar allows remote attackers to gain privileges by modifying critical parameters to (1) view_entry.php or (2) upcoming.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webcalendar
References: http://marc.info/?l=bugtraq&m=110011618724455&w=2, http://secunia.com/advisories/13164, http://www.securityfocus.com/bid/11651
CVE-2004-1570
SQL injection vulnerability in bBlog 0.7.2 and 0.7.3 allows remote attackers to execute arbitrary SQL commands via the p parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bblog
References: http://marc.info/?l=bugtraq&m=109665351632048&w=2, http://secunia.com/advisories/12691, http://www.securityfocus.com/bid/11303
CVE-2004-1812
Multiple stack-based buffer overflows in Agent Common Services (1) cam.exe and (2) awservices.exe in Unicenter TNG 2.4 allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unicenter_tng
References: ftp://ftp.ca.com/CAproducts/unicenter/CCS31/nt/qi52764/QI52764.DB0, http://marc.info/?l=bugtraq&m=107936784030214&w=2, http://secunia.com/advisories/11131
CVE-2004-2316
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via a GET request containing an MS-DOS device name such as COM1.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mbedthis_appweb_http_server
References: http://secunia.com/advisories/10710/, http://www.securityfocus.com/bid/9494, https://exchange.xforce.ibmcloud.com/vulnerabilities/14926
CVE-2004-1001
Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shadow
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000894, http://secunia.com/advisories/13028, http://www.debian.org/security/2004/dsa-585
CVE-2004-1864
SQL injection vulnerability in Extreme Messageboard (XMB) 1.9 beta allows remote attackers to execute arbitrary SQL commands via the restrict parameter to (1) member.php, (2) misc.php, or (3) today.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xmb
References: http://marc.info/?l=bugtraq&m=108032355905265&w=2, http://securitytracker.com/id?1009561, http://www.osvdb.org/16886
CVE-2004-2086
Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sambar_server
References: http://securitytracker.com/id?1008979, http://www.osvdb.org/5786, http://www.sambar.com/security.htm
CVE-2004-0287
Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xlight_ftp_server
References: http://marc.info/?l=bugtraq&m=107695172917263&w=2, http://www.securityfocus.com/bid/9668, https://exchange.xforce.ibmcloud.com/vulnerabilities/15220
CVE-2004-0812
Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated with "setting up TSS limits," allows local users to cause a denial of service (crash) and possibly execute arbitrary code.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, enterprise_linux_desktop, enterprise_linux
References: http://linux.bkbits.net:8080/linux-2.6/cset%403fad673ber4GuU7iWppydzNIyLntEQ, http://secunia.com/advisories/13359, http://www.ciac.org/ciac/bulletins/p-047.shtml
CVE-2004-1849
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to dodelautores.html or (2) handle parameter to addhandle.html.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cpanel
References: http://marc.info/?l=bugtraq&m=108006627005371&w=2, http://securitytracker.com/id?1009541, http://www.osvdb.org/4529
CVE-2004-1494
Buffer overflow in the Screen Fetch option in XDICT 2002 through 2005 allows remote attackers to cause a denial of service ( CPU consumption or application exit) and possibly execute arbitrary code via a long string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xdict
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028241.html, http://marc.info/?l=bugtraq&m=109933696831725&w=2, http://secway.org/Advisory/Ad20041026EN.txt
CVE-2004-2182
Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jrun
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html, http://www.securityfocus.com/bid/11414, http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2004-1110
The mtink status monitor before 1.0.5 for Epson printers allows local users to overwrite arbitrary files via a symlink attack on the epson temporary file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mtink, linux
References: http://bugs.gentoo.org/show_bug.cgi?id=70310, http://www.gentoo.org/security/en/glsa/glsa-200411-17.xml, http://www.securityfocus.com/bid/11640
CVE-2004-0763
Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: firefox
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://bugzilla.mozilla.org/show_bug.cgi?id=253121, http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/024372.html
CVE-2004-2323
DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or configuration files such as Web.config.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dotnetnuke
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html, http://secunia.com/advisories/10747, http://www.osvdb.org/3749
CVE-2004-0970
The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files.  NOTE: the znew vulnerability may overlap CVE-2003-0367.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: gzip
References: http://secunia.com/advisories/13131, http://www.debian.org/security/2004/dsa-588, http://www.securityfocus.com/bid/11288
CVE-2004-0252
TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: typsoft_ftp_server
References: http://marc.info/?l=bugtraq&m=107591511716707&w=2, http://www.securityfocus.com/bid/9573, http://www.securitytracker.com/alerts/2004/Feb/1008943.html
CVE-2004-0920
Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause a denial of service (application crash) using a filename containing an MS-DOS device name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: norton_antivirus
References: http://www.idefense.com/application/poi/display?id=147&type=vulnerabilities, http://www.seifried.org/security/advisories/kssa-010.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/17603
CVE-2004-0909
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: thunderbird, mozilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=253942, http://marc.info/?l=bugtraq&m=109698896104418&w=2, http://secunia.com/advisories/12526
CVE-2004-1939
Cross-site scripting (XSS) vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes (%252F) in the key parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: zaep_antispam
References: http://marc.info/?l=bugtraq&m=108241507812681&w=2, http://secunia.com/advisories/11388, http://www.securiteam.com/windowsntfocus/5EP0I15CKK.html
CVE-2004-1519
SQL injection vulnerability in bug.php in phpBugTracker 0.9.1 allows remote attackers to execute arbitrary SQL commands via (1) the bug_id parameter in a viewvotes operation or (2) the project parameter in an add operation.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpbugtracker
References: http://marc.info/?l=bugtraq&m=110029315521568&w=2, http://marc.info/?l=bugtraq&m=110037345428403&w=2, http://marc.info/?l=bugtraq&m=110037408101974&w=2
CVE-2004-2170
Directory traversal vulnerability in sample_showcode.html in Caravan 2.00/03d and earlier allows remote attackers to read arbitrary files via the fname parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: caravan_business_server
References: http://members.lycos.co.uk/r34ct/main/Caravan/Caravan.txt, http://securitytracker.com/id?1008913, http://www.osvdb.org/3787
CVE-2004-2746
SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xtremeasp_photogallery
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://secunia.com/advisories/10659, http://securityreason.com/securityalert/3346, http://securitytracker.com/id?1008745
CWE: CWE-89
CVE-2004-2365
Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_xp, windows_2003_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0119.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15057, http://archives.neohapsis.com/archives/bugtraq/2004-02/0119.html
CVE-2004-1123
Darwin Streaming Server 5.0.1, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) via a DESCRIBE request with a location that contains a null byte.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quicktime_streaming_server, darwin_streaming_server, mac_os_x_server, mac_os_x
References: http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities, https://exchange.xforce.ibmcloud.com/vulnerabilities/18357, http://www.idefense.com/application/poi/display?id=159&type=vulnerabilities
CVE-2004-0418
serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: propack, linux, openbsd, cvs, openpkg
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE-2004-1650
D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the IP address of the camera via a UDP broadcast packet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dcs-900_internet_camera
References: http://marc.info/?l=bugtraq&m=109396893820049&w=2, http://miscname.com/public/dcs-900/, http://secunia.com/advisories/12425
CVE-2004-2006
Trend Micro OfficeScan 3.0 - 6.0 has default permissions of "Everyone Full Control" on the installation directory and registry keys, which allows local users to disable virus protection.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: officescan
References: http://marc.info/?l=bugtraq&m=108395366909344&w=2, http://secunia.com/advisories/11576, http://www.osvdb.org/5990
CVE-2004-0893
The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt, windows_xp, windows_2003_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044, https://exchange.xforce.ibmcloud.com/vulnerabilities/18339, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1321
CVE-2004-1791
The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: full_rate_adsl_router
References: http://securitytracker.com/id?1008643, http://www.osvdb.org/3511, http://www.securityfocus.com/archive/1/349089
CVE-2004-2063
Cross-site scripting (XSS) vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to inject arbitrary HTML or web script via the feedback parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: antiboard
References: http://marc.info/?l=bugtraq&m=109105610220965&w=2, http://secunia.com/advisories/12137, http://www.osvdb.org/8269
CVE-2004-0490
cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php to use the SCRIPT_FILENAME variable to find and execute a script instead of the PATH_TRANSLATED variable, which allows local users to execute arbitrary PHP code as other users via a URL that references the attacker's script after the user's script, which executes the attacker's script with the user's privileges, a different vulnerability than CVE-2004-0529.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cpanel
References: http://bugzilla.cpanel.net/show_bug.cgi?id=283, http://bugzilla.cpanel.net/show_bug.cgi?id=664, http://www.a-squad.com/audit/explain10.html
CVE-2004-0911
telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netkit
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=273694, http://www.debian.org/security/2004/dsa-556, http://www.securityfocus.com/archive/1/375743
CVE-2004-1740
Music daemon (musicd) 0.0.3 and earlier allows remote attackers to read arbitrary files by calling LOAD with a full pathname, then calling SHOWLIST.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: music_daemon
References: http://marc.info/?l=bugtraq&m=109329098806595&w=2, http://musicdaemon.sourceforge.net/, http://www.securityfocus.com/bid/11006
CVE-2004-2572
AMAX Magic Winmail Server 3.6 allows remote attackers to obtain sensitive information by entering (1) invalid characters such as "()" or (2) a large number of characters in the Lookup field on the netaddressbook.php web form, which reveals the path in an ldaplib.php error message when the ldap_search function fails, due to improper processing of the $keyword variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: magic_winmail_server
References: http://members.lycos.co.uk/r34ct/main/ldaplib/ldaplib.php%20reveal%20local%20path%20of%20Winmail%203.6%20webmail%20directory.txt, http://secunia.com/advisories/11015, http://www.magicwinmail.net/download/english-help.chm
CVE-2004-0136
The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a "corrupted binary."
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc, http://secunia.com/advisories/11872, http://www.osvdb.org/7123
CVE-2004-2056
SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nucleus_cms
References: http://marc.info/?l=bugtraq&m=109087144509299&w=2, http://secunia.com/advisories/13136, https://exchange.xforce.ibmcloud.com/vulnerabilities/18002
CVE-2004-1136
Buffer overflow in CuteFTP Professional 6.0, and possibly other versions, allows remote FTP servers to cause a denial of service (application crash) via large replies to FTP commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cuteftp
References: http://marc.info/?l=bugtraq&m=110182983622642&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18309, http://marc.info/?l=bugtraq&m=110182983622642&w=2
CVE-2004-0681
Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: comersus_cart
References: http://marc.info/?l=bugtraq&m=108922169327403&w=2, http://www.securityfocus.com/bid/10674, https://exchange.xforce.ibmcloud.com/vulnerabilities/16646
CVE-2004-1377
The (1) fixps (aka fixps.in) and (2) psmandup (aka psmandup.in) scripts in a2ps before 4.13 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: turbolinux_home, turbolinux_workstation, a2ps, turbolinux_server
References: http://secunia.com/advisories/13641, http://www.gentoo.org/security/en/glsa/glsa-200501-02.xml, http://www.securityfocus.com/bid/12108
CVE-2004-2737
SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary SQL commands via the where parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dna_helpdesk
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://secunia.com/advisories/12119, http://www.osvdb.org/8169, http://www.securiteam.com/windowsntfocus/5PP0L0ADGE.html
CWE: CWE-89
CVE-2004-0781
Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: icecast
References: http://www.debian.org/security/2004/dsa-541, http://www.securityfocus.com/bid/11021, https://exchange.xforce.ibmcloud.com/vulnerabilities/17086
CVE-2004-1164
The lock manager in Cisco CNS Network Registrar 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (process crash) via a certain "unexpected packet sequence."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cns_network_registrar
References: http://www.cisco.com/en/US/products/products_security_advisory09186a008036786d.shtml, http://www.securityfocus.com/bid/11793, https://exchange.xforce.ibmcloud.com/vulnerabilities/18328
CVE-2004-1371
Stack-based buffer overflow in Oracle 9i and 10g allows remote attackers to execute arbitrary code via a long token in the text of a wrapped procedure.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, oracle10g, oracle8i
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=110382570313035&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.kb.cert.org/vuls/id/316206
CWE: CWE-119
CVE-2004-2690
Unrestricted file upload vulnerability in the Administration Panel for NewsPHP allows remote authenticated administrators to upload and execute arbitrary code instead of video files.
CVSS v2.0 Score: 8.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Affected Products: newsphp
References: http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html, http://securitytracker.com/alerts/2004/Apr/1009740.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15838
CVE-2004-2315
Mbedthis AppWeb HTTP server before 1.0.2 allows remote attackers to cause a denial of service (crash) via an empty OPTIONS request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mbedthis_appweb_http_server
References: http://secunia.com/advisories/10710/, http://www.securityfocus.com/bid/9494, https://exchange.xforce.ibmcloud.com/vulnerabilities/14926
CVE-2004-0788
Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gtk, gdkpixbuf
Related CWEs: CWE-190
Related CAPECs: CAPEC-92
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875, http://secunia.com/advisories/17657, http://www.debian.org/security/2004/dsa-546
CWE: CWE-190
CVE-2004-2072
Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: mambo_open_source
References: http://www.securityfocus.com/bid/9588, http://www.systemsecure.org/advisories/ssadvisory06022004.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/15062
CVE-2004-0159
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hsftp
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017737.html, http://www.osvdb.org/4029, http://www.securityfocus.com/bid/9715
CVE-2004-1859
Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: interscan_viruswall_for_windows_nt
References: http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=19257, http://marc.info/?l=bugtraq&m=108014604529316&w=2, http://secunia.com/advisories/11215
CVE-2004-1534
ZoneAlarm and ZoneAlarm Pro before 5.5.062, with ad-blocking enabled, allows remote web sites to cause a denial of service (application instability or system hang) via certain JavaScript.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: zonealarm
References: http://download.zonelabs.com/bin/free/securityAlert/18.html, http://marc.info/?l=bugtraq&m=110088808402495&w=2, http://secunia.com/advisories/13244/
CVE-2004-0552
Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: small_business_suite
References: http://www.idefense.com/application/poi/display?id=143&type=vulnerabilities, http://www.seifried.org/security/advisories/kssa-005.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/17468
CVE-2004-0480
Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lotus_notes
Related CWEs: CWE-88
Related CAPECs: CAPEC-137, CAPEC-88, CAPEC-174
References: http://marc.info/?l=bugtraq&m=108843896506099&w=2, http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510, http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities
CWE: CWE-88
CVE-2004-1395
The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earlier, (4) F.E.A.R. (First Encounter Assault and Recon), and possibly other games, allows remote attackers to cause a denial of service (connection refused) via a UDP packet that causes recvfrom to generate a return code that causes the listening loop to exit, as demonstrated using zero byte packets or packets between 8193 and 12280 bytes, which result in conditions that are not "Operation would block."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: no_one_lives_forever_2, contract_jack, tron
References: http://aluigi.altervista.org/adv/lithsock-adv.txt, http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029932.html, http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038095.html
CVE-2004-2606
The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: befsr41_v3, wrt54g
References: ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip, http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html, http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html
CVE-2004-0806
cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cdrecord
References: ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U, http://seclists.org/lists/bugtraq/2004/Sep/0097.html, http://secunia.com/advisories/12481/
CVE-2004-0201
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: definity_one_media_server, modular_messaging_message_storage_server, windows_2000, windows_nt, windows_98se
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023919.html, http://www.kb.cert.org/vuls/id/920060, http://www.us-cert.gov/cas/techalerts/TA04-196A.html
CVE-2004-1214
Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kreed
References: http://marc.info/?l=bugtraq&m=110201776207915&w=2, http://www.securityfocus.com/bid/11799, https://exchange.xforce.ibmcloud.com/vulnerabilities/18343
CVE-2004-1279
Buffer overflow in the get_file_list_stdin function in jpegtoavi 1.5 allows remote attackers to execute arbitrary code via a crafted set of JPEG files and filenames.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jpegtoavi
References: http://tigger.uic.edu/~jlongs2/holes/jpegtoavi.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18565, http://tigger.uic.edu/~jlongs2/holes/jpegtoavi.txt
CVE-2004-1643
WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that contains an invalid path with a "../" sequence.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ws_ftp_server
References: http://marc.info/?l=bugtraq&m=109389890712888&w=2, http://secunia.com/advisories/12406, http://www.securityfocus.com/bid/11065
CVE-2004-0108
The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sysstat, propack
References: ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc, http://www.debian.org/security/2004/dsa-460, http://www.redhat.com/support/errata/RHSA-2004-053.html
CVE-2004-2579
ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack vector involving a string that contains escape sequences represented with "overlong UTF-8 encoding."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ichain
References: http://secunia.com/advisories/12366, http://securitytracker.com/id?1011074, http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm