DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1531
SQL injection vulnerability in post.php in Invision Power Board (IPB) 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: invision_board
References: http://forums.invisionpower.com/index.php?showtopic=154916, http://marc.info/?l=bugtraq&m=110079592702417&w=2, http://marc.info/?l=bugtraq&m=111454805209191&w=2
CVE-2004-1906
Mcafee FreeScan allows remote attackers to cause a denial of service and possibly arbitrary code via a long string in the ScanParam property of a COM object, which may trigger a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freescan
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019877.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html, http://marc.info/?l=bugtraq&m=108136872711898&w=2
CVE-2004-2494
Cross-site scripting (XSS) vulnerability in _error in Ability Mail Server 1.18 allows remote attackers to inject arbitrary web script or HTML via the erromsg parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ability_mail_server
References: http://members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt, http://secunia.com/advisories/12039, http://securitytracker.com/id?1010672
CVE-2004-2658
resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login types.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: suse_linux
References: http://support.novell.com/techcenter/psdb/fa6c6a3e792bf79b1d85821c689ea578.html, http://support.novell.com/techcenter/psdb/fa6c6a3e792bf79b1d85821c689ea578.html
CVE-2004-0924
NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mac_os_x_server, mac_os_x, cups
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html, http://www.securityfocus.com/bid/11322, http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE-2004-2717
Multiple directory traversal vulnerabilities in admin.php3 in PHPMyChat 0.14.5 allow remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the (1) sheet and (2) What parameters.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: phpmychat
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html, http://secunia.com/advisories/11894, http://securitytracker.com/id?1010515
CWE: CWE-22
CVE-2004-2024
The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zen_cart
References: http://www.zen-cart.com/modules/ipb/index.php?showtopic=4873, http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD, http://www.zen-cart.com/modules/ipb/index.php?showtopic=4873
CVE-2004-0117
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netmeeting, windows_2000, windows_me, windows_98, windows_2003_server
References: http://www.ciac.org/ciac/bulletins/o-114.shtml, http://www.kb.cert.org/vuls/id/353956, http://www.us-cert.gov/cas/techalerts/TA04-104A.html
CVE-2004-1063
PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ubuntu_linux, php
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915, http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml, http://www.hardened-php.net/advisories/012004.txt
CVE-2004-0938
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freeradius
References: http://security.gentoo.org/glsa/glsa-200409-29.xml, http://www.kb.cert.org/vuls/id/541574, http://www.osvdb.org/10178
CVE-2004-2305
Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: etrust_antivirus_ee
References: http://www.securityfocus.com/bid/9665, http://www.securitytracker.com/alerts/2004/Feb/1009074.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15230
CVE-2004-2144
Baal Smart Forms before 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: baal_smart_forms
Related CWEs: CWE-425
Related CAPECs: CAPEC-668, CAPEC-144, CAPEC-127
MITRE ATT&CK Techniques: T1565.002, T1083
MITRE ATT&CK Tactics: T1565
References: http://secunia.com/advisories/12649/, http://securitytracker.com/id?1011416, https://exchange.xforce.ibmcloud.com/vulnerabilities/17499
CWE: CWE-425
MITRE ATT&CK techniques: T1565.002, T1083
MITRE ATT&CK tactics: T1565
CVE-2004-1544
Cross-site scripting (XSS) vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web script as other users via the query parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: jspwiki
References: http://marc.info/?l=bugtraq&m=110135663220831&w=2, http://secunia.com/advisories/13285/, http://www.securityfocus.com/bid/11746
CVE-2004-1658
Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: personal_firewall
References: http://marc.info/?l=bugtraq&m=109420310631039&w=2, http://secunia.com/advisories/12468/, http://www.security.org.sg/vuln/kerio4016.html
CVE-2004-0246
Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: les_commentaires
References: http://marc.info/?l=bugtraq&m=107584083719763&w=2, http://secunia.com/advisories/10768/, http://www.securityfocus.com/bid/9536
CVE-2004-0828
The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: aix
References: http://secunia.com/advisories/12664/, http://securitytracker.com/id?1011429, http://www.securityfocus.com/bid/11264
CVE-2004-1744
Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) via many large HTTP requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: efs_web_server
References: http://marc.info/?l=bugtraq&m=109341398102863&w=2, http://secunia.com/advisories/12372, http://securitytracker.com/id?1011045
CVE-2004-1578
Cross-site scripting (XSS) vulnerability in index.php in Invision Power Board 2.0.0 allows remote attackers to execute arbitrary web script or HTML via the Referer field in the HTTP header.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: invision_power_board
References: http://marc.info/?l=bugtraq&m=109701091207517&w=2, http://secunia.com/advisories/12740, http://www.securityfocus.com/bid/11332
CVE-2004-1504
The displaycontent function in config.php for Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to gain sensitive information via a blank show parameter, which reveals the installation path in an error message, as demonstrated using index.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jaf_cms
References: http://echo.or.id/adv/adv08-y3dips-2004.txt, http://marc.info/?l=bugtraq&m=110004150430309&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18006
CVE-2004-2708
Gyach Enhanced (Gyach-E) before 1.0.0 stores passwords in plaintext, which allows attackers to obtain user passwords by reading the configuration file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gyach_enhanced
Related CWEs: CWE-255
References: http://www.osvdb.org/8834, http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php, http://www.osvdb.org/8834
CWE: CWE-255
CVE-2004-2049
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files for the keeper library, which allows attackers to gain access.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thintune_xm, thintune_xs, thintune_mobile, thintune_extreme, thintune_s
References: http://marc.info/?l=bugtraq&m=109068491801021&w=2, http://secunia.com/advisories/12154, http://securitytracker.com/id?1010770
CVE-2004-0900
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_nt
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042, https://exchange.xforce.ibmcloud.com/vulnerabilities/18342, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3577
CVE-2004-0242
X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: x-cart
References: http://marc.info/?l=bugtraq&m=107582648326448&w=2, http://www.securityfocus.com/bid/9563, https://exchange.xforce.ibmcloud.com/vulnerabilities/15036
CVE-2004-2005
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: eudora
References: http://lists.netsys.com/pipermail/full-disclosure/2004-May/021059.html, http://marc.info/?l=bugtraq&m=108395487628044&w=2, http://secunia.com/advisories/11568
CVE-2004-1841
SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: website_traffic_analyzer
References: http://marc.info/?l=bugtraq&m=108006319730976&w=2, http://www.securityfocus.com/bid/9948, https://exchange.xforce.ibmcloud.com/vulnerabilities/15576
CVE-2004-2470
Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: madbms
References: http://secunia.com/advisories/11256, http://test.madgenius.com/madBMS/ChangeLog, http://www.osvdb.org/4756
CVE-2004-1797
Cross-site scripting (XSS) vulnerability in search.php for FreznoShop 1.3.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: freznoshop
References: http://secunia.com/advisories/10547, http://securitytracker.com/id?1008606, http://www.freznoshop.com/changelog_en.htm
CVE-2004-1997
Kolab stores OpenLDAP passwords in plaintext in the slapd.conf file, which may be installed world-readable, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kolab_groupware_server, openpkg
References: http://marc.info/?l=bugtraq&m=108377525924422&w=2, http://secunia.com/advisories/11560, http://www.erfrakon.de/projects/kolab/download/kolab-server-1.0/src/Changelog
CVE-2004-1813
VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication via an HTTP request to home.asp with a trailing slash (/).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vgw4_8_telephony_gateway
References: http://marc.info/?l=bugtraq&m=107936739131657&w=2, http://www.securityfocus.com/bid/9876, https://exchange.xforce.ibmcloud.com/vulnerabilities/15476
CVE-2004-2639
Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknown attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: journalness
References: http://secunia.com/advisories/11431, http://securitytracker.com/alerts/2004/Apr/1009909.html, http://www.osvdb.org/5572
CVE-2004-2354
SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting (XSS) attacks when MySQL errors are triggered.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: php-nuke, 4nguestbook
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0139.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15478, http://archives.neohapsis.com/archives/bugtraq/2004-03/0139.html
CVE-2004-0693
The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: qt
References: http://security.gentoo.org/glsa/glsa-200408-20.xml, http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1, http://www.debian.org/security/2004/dsa-542
CVE-2004-0342
WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one error.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wftpd_pro_server
Related CWEs: CWE-193
References: http://marc.info/?l=bugtraq&m=107801142924976&w=2, http://secunia.com/advisories/11001, http://www.osvdb.org/4116
CWE: CWE-193
CVE-2004-1360
Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite arbitrary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: sunos, solaris
References: http://secunia.com/advisories/10991, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57509-1, http://www.auscert.org.au/render.html?it=3902
CVE-2004-0386
Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux, linux, mplayer
References: http://marc.info/?l=bugtraq&m=108067020624076&w=2, http://secunia.com/advisories/11259, http://security.gentoo.org/glsa/glsa-200403-13.xml
CVE-2004-1098
MIMEDefang in MIME-tools 5.414 allows remote attackers to bypass virus scanning capabilities via an e-mail attachment with a virus that contains an empty boundary string in the Content-Type header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mandrake_linux_corporate_server, suse_linux, mimedefang, mandrake_linux
References: http://lists.roaringpenguin.com/pipermail/mimedefang/2004-October/024959.html, http://www.gentoo.org/security/en/glsa/glsa-200411-06.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2004:123
CVE-2004-1027
Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: debian_linux, linux, unarj
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027348.html, http://lwn.net/Articles/121827/, http://security.gentoo.org/glsa/glsa-200411-29.xml
CVE-2004-0216
Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ie, internet_explorer
References: http://marc.info/?l=bugtraq&m=109760693512754&w=2, http://marc.info/?l=bugtraq&m=110616383332055&w=2, http://marc.info/?l=ntbugtraq&m=110619893620517&w=2
CVE-2004-0299
Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of "/" (slash) characters.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: smallftpd
References: http://marc.info/?l=bugtraq&m=107714207708375&w=2, http://www.securityfocus.com/bid/9684, https://exchange.xforce.ibmcloud.com/vulnerabilities/15262
CVE-2004-2539
Unknown vulnerability in Network Appliance NetCache 5.2 and Data ONTAP 6.0 allows remote attackers to cause a denial of service (panic and reboot) and possibly other impacts via unknown attack vectors, possibly related to unspecified worms, as identified by bug ID
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: netcache, data_ontap
References: http://secunia.com/advisories/11516, http://securitytracker.com/id?1010013, http://www.osvdb.org/5732
CVE-2004-0321
Team Factor 1.25 and earlier allows remote attackers to cause a denial of service (crash) via a packet that uses a negative number to specify the size of the data block that follows, which causes Team Factor to read unallocated memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: team_factor
References: http://marc.info/?l=bugtraq&m=107756001412888&w=2, http://www.securityfocus.com/bid/9708, http://www.zone-h.org/advisories/read/id=4006
CVE-2004-0539
The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x_server, mac_os_x
References: http://docs.info.apple.com/article.html?artnum=25785, http://www.kb.cert.org/vuls/id/773190, http://docs.info.apple.com/article.html?artnum=25785
CVE-2004-1452
Tomcat before 5.0.27-r3 in Gentoo Linux sets the default permissions on the init scripts as tomcat:tomcat, but executes the scripts with root privileges, which could allow local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://secunia.com/advisories/12296/, http://www.gentoo.org/security/en/glsa/glsa-200408-15.xml, http://www.securityfocus.com/bid/10951
CVE-2004-2248
Unknown vulnerability in RemoteEditor before 0.1.1 has unknown impact and attack vectors, related to "oversize submissions."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: remoteeditor
References: http://securitytracker.com/id?1012147, http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279743, http://www.osvdb.org/11444
CVE-2004-0686
Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: samba, secure_linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854, http://marc.info/?l=bugtraq&m=109051340810458&w=2
CVE-2004-1871
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort, (6) page, (7) si, or (8) cat parameters to showmembers.php, or the (9) photo name, (10) photo description, (11) album name, or (12) album description fields.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: photopost_php_pro
References: http://marc.info/?l=bugtraq&m=108057790723123&w=2, http://secunia.com/advisories/11241, http://securitytracker.com/id?1009571
CVE-2004-0685
Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel, enterprise_linux_desktop, secure_linux, enterprise_linux
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921, http://secunia.com/advisories/20162, http://secunia.com/advisories/20163
CVE-2004-2593
Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a packet with a long cmd_args buffer.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quake_ii_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html, http://secunia.com/advisories/13013, http://secur1ty.net/advisories/001
CVE-2004-0070
PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ezcontents
References: http://marc.info/?l=bugtraq&m=107392588915627&w=2, http://www.ezcontents.org/forum/viewtopic.php?t=361, http://www.osvdb.org/6878
CVE-2004-1591
The web interface for Micronet Wireless Broadband Router SP916BM running firmware before 1.9 08/04/2004 resets the password to the default password when the router is shut off, which could allow remote attackers to gain access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sp916bm
References: http://marc.info/?l=bugtraq&m=109759963126161&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17697, http://marc.info/?l=bugtraq&m=109759963126161&w=2
CVE-2004-0013
jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a denial of service (crash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jabber_server
References: http://secunia.com/advisories/10559, http://www.debian.org/security/2004/dsa-414, http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:005
CVE-2004-2535
The person-to-person secure messaging feature in Sticker before 3.1.0 beta 2 allows remote attackers to post messages to unauthorized private groups by using the group's public encryption key.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: sticker
References: http://securitytracker.com/id?1011580, http://www.osvdb.org/10662, http://www.securityfocus.com/bid/11333
CVE-2004-1097
Format string vulnerability in the cherokee_logger_ncsa_write_string function in Cherokee 0.4.17 and earlier, when authenticating via auth_pam, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in the URL.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cherokee_httpd
References: http://bugs.gentoo.org/show_bug.cgi?id=67667, http://www.gentoo.org/security/en/glsa/glsa-200411-02.xml, http://www.securityfocus.com/bid/11574
CVE-2004-0811
Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server
References: http://fedoranews.org/updates/FEDORA-2004-313.shtml, http://security.gentoo.org/glsa/glsa-200409-33.xml, http://www.apache.org/dist/httpd/patches/apply_to_2.0.51/CAN-2004-0811.patch
CVE-2004-1215
Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP packet, which causes a "message too long" socket error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kreed
References: http://marc.info/?l=bugtraq&m=110201776207915&w=2, http://www.securityfocus.com/bid/11799, https://exchange.xforce.ibmcloud.com/vulnerabilities/18344
CVE-2004-2293
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) eid parameter or (2) query parameter to the Encyclopedia module, (3) preview_review function in the Reviews module as demonstrated by the url, cover, rlanguage, and hits parameters, or (4) savecomment function in the Reviews module, as demonstrated using the uname parameter.  NOTE: the Faq/categories and Encyclopedia/ltr issues are already covered by CVE-2005-1023.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://secunia.com/advisories/11852, http://www.osvdb.org/6997, http://www.osvdb.org/6998
CVE-2004-0505
The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: propack, ethereal
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
CVE-2004-0320
Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the module's run-time memory via certain sequences of commands.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nshield
References: http://marc.info/?l=bugtraq&m=107755899018249&w=2, http://www.osvdb.org/4055, http://www.securityfocus.com/bid/9717
CVE-2004-0567
The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an "unchecked buffer" and possibly triggers a buffer overflow, aka the "Name Validation Vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, windows_2003_server
References: http://secunia.com/advisories/13466, http://securitytracker.com/id?1012517, http://www.ciac.org/ciac/bulletins/p-054.shtml
CVE-2004-1128
Buffer overflow in CMailCOM.dll in CMailServer 5.2 allows remote attackers to execute arbitrary code via an attachment with a long filename.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cmailserver
References: http://marc.info/?l=bugtraq&m=110137313329955&w=2, http://www.security.org.sg/vuln/cmailserver52.html, http://www.securityfocus.com/bid/11742
CVE-2004-0792
Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: rsync
References: http://marc.info/?l=bugtraq&m=109268147522290&w=2, http://marc.info/?l=bugtraq&m=109277141223839&w=2, http://samba.org/rsync/#security_aug04
CVE-2004-2129
SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: surfnow_standard, surfnow_professional
References: http://marc.info/?l=bugtraq&m=107530924723559&w=2, http://www.securityfocus.com/bid/9519, https://exchange.xforce.ibmcloud.com/vulnerabilities/14976
CVE-2004-0968
The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: enterprise_linux, enterprise_linux_desktop, glibc
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136318, http://security.gentoo.org/glsa/glsa-200410-19.xml, http://www.debian.org/security/2005/dsa-636
CVE-2004-2146
CRLF injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows attackers to conduct HTTP response splitting attacks via the fid parameter in a writenew action to thread-post.asp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: megabbs
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0962.html, http://marc.info/?l=bugtraq&m=109631200701134&w=2, http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924
CVE-2004-1807
Cross-site scripting (XSS) vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cfwebstore
References: http://marc.info/?l=bugtraq&m=107911090901744&w=2, http://secunia.com/advisories/11112, http://securitytracker.com/id?1009403
CVE-2004-2635
An ActiveX control for McAfee Security Installer Control System 4.0.0.81 allows remote attackers to access the Windows registry via web pages that use the control's RegQueryValue() method.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: security_installer_control_system
References: http://archives.neohapsis.com/archives/ntbugtraq/2004-q2/0026.html, http://secunia.com/advisories/11493, http://www.osvdb.org/5713
CVE-2004-0690
The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kde
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261386, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864, http://marc.info/?l=bugtraq&m=109225538901170&w=2
CVE-2004-0504
Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: propack, ethereal
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
CVE-2004-1307
Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: propack, modular_messaging_message_storage_server, linux, mac_os_x_server, mandrake_linux
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1, http://sunsolve.sun.com/search/document.do?assetkey=1-66-201072-1
CVE-2004-0996
main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: unixware, debian_linux, cscope, linux
References: http://docs.info.apple.com/article.html?artnum=306172, http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html, http://marc.info/?l=bugtraq&m=110133485519690&w=2
CVE-2004-0002
The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html, http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html
CVE-2004-2729
Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections.
CVSS v2.0 Score: 4.4 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Affected Products: connectivity
Related CWEs: CWE-264
References: http://secunia.com/advisories/12984, http://securitytracker.com/id?1011942, http://www.osvdb.org/11132
CWE: CWE-264
CVE-2004-1222
weblibs.pl in WebLibs 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the TextFile parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: weblibs
References: http://marc.info/?l=bugtraq&m=110245395510945&w=2, http://www.securityfocus.com/bid/11848, https://exchange.xforce.ibmcloud.com/vulnerabilities/18399
CVE-2004-1672
attachment.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to view other users' attachments by specifying the username and message ID in an HTTP request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_mail
References: http://marc.info/?l=bugtraq&m=109483971420067&w=2, http://secunia.com/advisories/12789, http://www.securityfocus.com/bid/11371
CVE-2004-1076
Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, atari800
References: http://cvs.sourceforge.net/viewcvs.py/atari800/atari800/DOC/ChangeLog?view=markup, http://marc.info/?l=bugtraq&m=110142899319841&w=2, http://marc.info/?l=bugtraq&m=110149441815270&w=2
CVE-2004-0848
Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: powerpoint, project, word, works, office
References: http://www.kb.cert.org/vuls/id/416001, http://www.us-cert.gov/cas/techalerts/TA05-039A.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-005
CVE-2004-2441
Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential security issue."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kerio_mailserver
References: http://secunia.com/advisories/12702/, http://www.kerio.com/kms_history.html, http://www.securityfocus.com/bid/11300
CVE-2004-1763
Buffer overflow in hsrun.exe for HAHTsite Scenario Server 5.1 Patch 06 (build 91) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long project name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hahtsite_scenario_server
References: http://marc.info/?l=full-disclosure&m=108091662105032&w=2, http://secunia.com/advisories/11288, http://www.kb.cert.org/vuls/id/705958
CVE-2004-2327
Vizer Web Server 1.9.1 allows remote attackers to cause a denial of service (crash) via multiple malformed requests including (1) requests without GET, (2) GET requests without HTTP, (3) or long GET requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vizer_web_server
References: http://www.securityfocus.com/archive/1/354156, http://www.securityfocus.com/bid/9678, https://exchange.xforce.ibmcloud.com/vulnerabilities/15239
CVE-2004-0303
OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: owls_workshop
References: http://marc.info/?l=bugtraq&m=107712123305706&w=2, http://www.securityfocus.com/bid/9689, http://www.zone-h.org/en/advisories/read/id=3973/
CVE-2004-2532
Serv-U FTP server before 5.1.0.0 has a default account and password for local administration, which allows local users to execute arbitrary commands by connecting to the server using the default administrator account, creating a new user, logging in as that new user, and then using the SITE EXEC command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: serv-u_file_server
Related CWEs: CWE-255
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0216.html, http://www.osvdb.org/8877, http://www.securityfocus.com/bid/10886
CWE: CWE-255
CVE-2004-1352
Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://secunia.com/advisories/13340, http://securitytracker.com/id?1012368, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57675-1&searchclause=%22category:security%22%20%22availability%2C%20security%22
CVE-2004-0657
Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: tru64_unix, ntp
Related CWEs: CWE-190
Related CAPECs: CAPEC-92
References: http://marc.info/?l=bugtraq&m=108922292425219&w=2, http://www.kb.cert.org/vuls/id/584606, https://exchange.xforce.ibmcloud.com/vulnerabilities/15406
CWE: CWE-190
CVE-2004-1789
Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth_1 page.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: zywall10
References: http://secunia.com/advisories/10574, http://securitytracker.com/id?1008644, http://www.osvdb.org/12793
CVE-2004-2667
Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: lotus_domino
References: http://secunia.com/advisories/11925, http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21171253, http://www.osvdb.org/displayvuln.php?osvdb_id=7268
CVE-2004-2734
webadmin-apache.conf in Novell Web Manager of Novell NetWare 6.5 uses an uppercase Alias tag with an inconsistent lowercase directory tag for a volume, which allows remote attackers to bypass access control to the WEB-INF folder.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netware
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://secunia.com/advisories/12049, http://securitytracker.com/id?1011012, http://support.novell.com/cgi-bin/search/searchtid.cgi?/10094233.htm
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2004-2479
Squid Web Proxy Cache 2.5 might allow remote attackers to obtain sensitive information via URLs containing invalid hostnames that cause DNS operations to fail, which results in references to previously used error messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: squid_web_proxy_cache
References: http://fedoranews.org/updates/FEDORA--.shtml, http://secunia.com/advisories/13408, http://secunia.com/advisories/16977
CVE-2004-1514
04WebServer 1.42 allows remote attackers to cause a denial of service (fail to restart properly) via an HTTP request for an MS-DOS device name such as COM2.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 04webserver
References: http://marc.info/?l=bugtraq&m=110012542615484&w=2, http://marc.info/?l=bugtraq&m=110054395311823&w=2, http://secunia.com/advisories/13159/
CVE-2004-1852
DameWare Mini Remote Control 3.x before 3.74 and 4.x before 4.2 transmits the Blowfish encryption key in plaintext, which allows remote attackers to gain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dameware_mini_remote_control
Related CWEs: CWE-319
Related CAPECs: CAPEC-383, CAPEC-102, CAPEC-477
MITRE ATT&CK Techniques: T1056.004, T1040
MITRE ATT&CK Tactics: T1056
References: http://marc.info/?l=bugtraq&m=108016344224973&w=2, http://secunia.com/advisories/11205, http://securitytracker.com/id?1009557
CWE: CWE-319
MITRE ATT&CK techniques: T1056.004, T1040
MITRE ATT&CK tactics: T1056
CVE-2004-0630
The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: acrobat_reader
References: http://security.gentoo.org/glsa/glsa-200408-14.xml, http://www.adobe.com/support/techdocs/322914.html, http://www.idefense.com/application/poi/display?id=124&type=vulnerabilities
CVE-2004-0641
Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: speedtouch
References: http://secunia.com/advisories/12238/, http://www.auscert.org.au/render.html?it=4299, http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true
CVE-2004-2398
Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: fantastico_de_luxe
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0206.html, http://www.securityfocus.com/bid/10390, https://exchange.xforce.ibmcloud.com/vulnerabilities/16197
CVE-2004-0335
LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to (1) index.html, (2) cgi-bin/, or (3) users/.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 602pro_lan_suite
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html, http://marc.info/?l=bugtraq&m=107799540630302&w=2, http://www.securityfocus.com/bid/9780
CVE-2004-0174
Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "short-lived connection on a rarely-accessed listening socket."
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
Related CWEs: CWE-667
Related CAPECs: CAPEC-25, CAPEC-27, CAPEC-26
MITRE ATT&CK Techniques: T1499.004
MITRE ATT&CK Tactics: T1499
References: http://marc.info/?l=bugtraq&m=107973894328806&w=2, http://marc.info/?l=bugtraq&m=108066914830552&w=2, http://marc.info/?l=bugtraq&m=108369640424244&w=2
CWE: CWE-667
MITRE ATT&CK techniques: T1499.004
MITRE ATT&CK tactics: T1499
CVE-2004-1596
The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 3cradsl72
References: http://marc.info/?l=bugtraq&m=109778914829901&w=2, http://marc.info/?l=bugtraq&m=109810854031673&w=2, http://www.securityfocus.com/archive/1/378551