DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1551
Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: pafiledb
References: http://marc.info/?l=bugtraq&m=109613031414184&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17504, http://marc.info/?l=bugtraq&m=109613031414184&w=2
CVE-2004-2483
Kerio WinRoute Firewall before 6.0.9 uses information from PTR queries in response to A queries, which allows remote attackers to poison the DNS cache or cause a denial of service (connection loss).
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: winroute_firewall
References: http://secunia.com/advisories/13374, http://www.kerio.com/security_advisory.html, http://www.osvdb.org/12293
CVE-2004-2003
Buffer overflow in the ssl_prcert function in the SSLway filter (sslway.c) for DeleGate 8.9.2 and earlier allows remote attackers to execute arbitrary code via a certificate with a long (1) subject or (2) issuer name field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: delegate
References: http://marc.info/?l=bugtraq&m=108386181021070&w=2, http://secunia.com/advisories/11569, http://www.osvdb.org/5945
CVE-2004-2645
Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "CHOICE" types with "indefinite length structures."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: asn.1_compiler
References: http://secunia.com/advisories/12794, http://securitytracker.com/id?1011622, http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592
CVE-2004-2656
Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote attackers to inject arbitrary web script or HTML via (1) the topic parameter in search.pl and (2) the filter parameter in submit.pl.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: slashcode
References: http://archives.neohapsis.com/archives/bugtraq/2004-12/0170.html, http://secunia.com/advisories/13491, http://www.osvdb.org/21874
CVE-2004-1667
Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server crash) via a long client response.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: halo_combat_evolved
References: http://aluigi.altervista.org/adv/haloboom-adv.txt, http://marc.info/?l=bugtraq&m=109479695022024&w=2, http://secunia.com/advisories/12504
CVE-2004-0882
Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, samba, linux, linux_advanced_workstation, fedora_core
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt, ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899
CVE-2004-1700
Cross-site scripting (XSS) vulnerability in SettingsBase.php in Pinnacle ShowCenter 1.51 build 121 allows remote attackers to inject arbitrary HTML or web script via the Skin parameter, which is echoed in an error message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: showcenter
References: http://secunia.com/advisories/12613, http://www.securityfocus.com/bid/11415, https://exchange.xforce.ibmcloud.com/vulnerabilities/17708
CVE-2004-0323
Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in misc.php, (3) tpp parameter in forumdisplay.php, (4) ascdesc parameter in forumdisplay.php, or (5) the addon parameter in stats.php.  NOTE: it has also been shown that item (3) is also in XMB 1.9 beta.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xmb
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0645.html, http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html, http://marc.info/?l=bugtraq&m=107756526625179&w=2
CVE-2004-0836
Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, mysql
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://bugs.mysql.com/bug.php?id=4017, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892, http://lists.mysql.com/internals/14726
CWE: CWE-119
CVE-2004-1678
Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via ".." sequences terminated by a %00 (null) character in the lang parameter, which can leak portions of the requested files if a compilation error message occurs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: perldesk
References: http://marc.info/?l=bugtraq&m=109509026406554&w=2, http://secunia.com/advisories/12512, http://www.securityfocus.com/bid/11160
CVE-2004-2273
efFingerD 0.2.12 allows remote attackers to cause a denial of service (daemon crash) via a packet with a single byte, which triggers a "Wrong protocol or connection state" error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: effingerd
References: http://secunia.com/advisories/11573, http://www.osvdb.org/5992, http://secunia.com/advisories/11573
CVE-2004-1947
The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to (1) obtain sensitive information such as system drives and contents or (2) use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bitdefender
References: http://marc.info/?l=bugtraq&m=108240639427412&w=2, http://marc.info/?l=bugtraq&m=108248367901616&w=2, http://secunia.com/advisories/11427
CVE-2004-2203
Ansel 1.2 through 2.0 uses insecure default permissions, which allows remote attackers to gain access to web readable directories.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ansel
References: http://securitytracker.com/id?1011775, http://www.osvdb.org/10898, http://www.securityfocus.com/bid/11420
CVE-2004-1137
Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute arbitrary code via (1) the ip_mc_source function, which decrements a counter to -1, or (2) the igmp_marksources function, which does not properly validate IGMP message parameters and performs an out-of-bounds read.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel, ubuntu_linux
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930, http://isec.pl/vulnerabilities/isec-0018-igmp.txt, http://marc.info/?l=bugtraq&m=110306397320336&w=2
CVE-2004-0627
The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mysql
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html, http://marc.info/?l=bugtraq&m=108904917528205&w=2, http://www.kb.cert.org/vuls/id/184030
CVE-2004-2698
Race condition in IMWheel 1.0.0pre11 and earlier, when running with the -k option, allows local users to cause a denial of service (IMWheel crash) and possibly modify arbitrary files via a symlink attack on the imwheel.pid file.
CVSS v2.0 Score: 6.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Affected Products: imwheel
Related CWEs: CWE-362
Related CAPECs: CAPEC-29, CAPEC-26
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0914.html, http://imwheel.sourceforge.net/files/DEVELOPMENT.txt, http://secunia.com/advisories/12349
CWE: CWE-362
CVE-2004-1335
Memory leak in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (memory consumption) by repeatedly calling the ip_cmsg_send function.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, fedora_core, linux
References: http://marc.info/?l=bugtraq&m=110383108211524&w=2, http://secunia.com/advisories/20163, http://secunia.com/advisories/20202
CVE-2004-1424
Cross-site scripting (XSS) vulnerability in view.php in Moodle 1.4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: moodle
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=110425409614735&w=2, http://marc.info/?l=bugtraq&m=110444531816566&w=2, http://secunia.com/advisories/13694
CWE: CWE-79
CVE-2004-0456
Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, pavuk, linux
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023322.html, http://security.gentoo.org/glsa/glsa-200406-22.xml, http://www.debian.org/security/2004/dsa-527
CVE-2004-1774
Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: application_server, oracle10g
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/025984.html, http://www.appsecinc.com/resources/alerts/oracle/2004-0001/, http://www.frsirt.com/exploits/20050413.OracleExploit.sql.php
CVE-2004-0528
Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: navigator
References: http://www.osvdb.org/6580, http://www.securityfocus.com/bid/10389, https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
CVE-2004-1486
Unknown vulnerability in Serviceguard A.11.13 through A.11.16.00 and Cluster Object Manager A.01.03 and B.01.04 through B.03.00.01 on HP-UX, Serviceguard A.11.14.04 and A.11.15.04 and Cluster Object Manager B.02.01.02 and B.02.02.02 on HP Linux, allow remote attackers to gain privileges via unknown attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: serviceguard, cluster_object_manager
References: http://marc.info/?l=bugtraq&m=109893515704267&w=2, http://secunia.com/advisories/12946, http://www.securityfocus.com/bid/11507
CVE-2004-0615
Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: di-614\+, di-624, di-704p
References: http://archives.neohapsis.com/archives/bugtraq/2004-07/0014.html, http://marc.info/?l=bugtraq&m=108786257609932&w=2, http://marc.info/?l=bugtraq&m=108797273127182&w=2
CVE-2004-2206
SQL injection vulnerability in NatterChat 1.12 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: natterchat
References: http://www.maxpatrol.com/advdetails.asp?id=13, http://www.maxpatrol.com/mp_advisory.asp, http://www.osvdb.org/10759
CVE-2004-1207
The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service (server crash) via a large number of UDP join requests that exceeds the maximum player limit, as originally reported for Alpha Black Zero.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: seriousengine
References: http://marc.info/?l=bugtraq&m=109651567308405&w=2, http://marc.info/?l=bugtraq&m=110180289205605&w=2, http://secunia.com/advisories/12687
CVE-2004-1003
Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: scanmail_domino
References: http://cgi.nessus.org/plugins/dump.php3?id=14312, https://exchange.xforce.ibmcloud.com/vulnerabilities/17962, http://cgi.nessus.org/plugins/dump.php3?id=14312
CVE-2004-1866
nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, which triggers a null dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ip_over_dns_utility
References: http://marc.info/?l=bugtraq&m=108034249916453&w=2, http://nstx.dereference.de/nstx/nstx-1.1-beta4.tgz, http://securitytracker.com/id?1009567
CVE-2004-2739
The setup routine (setup.php) in PHProjekt 4.2.1 and earlier allows remote attackers to modify system configuration via unknown attack vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phprojekt
Related CWEs: CWE-264
References: http://secunia.com/advisories/13355, http://securitytracker.com/id?1012369, http://www.gentoo.org/security/en/glsa/glsa-200412-06.xml
CWE: CWE-264
CVE-2004-0179
Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, cadaver, neon, openoffice, subversion
Related CWEs: CWE-134
Related CAPECs: CAPEC-135, CAPEC-67
References: ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc, http://lists.suse.com/archive/suse-security-announce/2004-Apr/0002.html, http://lists.suse.com/archive/suse-security-announce/2004-Apr/0003.html
CWE: CWE-134
CVE-2004-2222
Directory traversal vulnerability in index.php in FsPHPGallery before 1.2 allows remote attackers to list arbitrary directories via the dir parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: fsphpgallery
References: http://gallery.devrandom.org.uk/cgi-bin/viewcvs.cgi/fsphpgallery/ChangeLog?rev=HEAD&amp%3Bcontent-type=text/vnd.viewcvs-markup, http://secunia.com/advisories/13074, http://securitytracker.com/id?1012063
CVE-2004-2710
Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to (1) sending certain typing statuses or (2) setting the chat room status bar to the current chat room name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gyach_enhanced
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.osvdb.org/8970, http://www.osvdb.org/8971, http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php
CWE: CWE-119
CVE-2004-1277
The download_selection_recursive() function in ftplist.c for IglooFTP 0.6.1 allows remote malicious FTP servers to overwrite arbitrary files via filenames that contain / (slash) characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: iglooftp
References: http://tigger.uic.edu/~jlongs2/holes/iglooftp2.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18561, http://tigger.uic.edu/~jlongs2/holes/iglooftp2.txt
CVE-2004-0148
wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wu-ftpd, propack
References: http://marc.info/?l=bugtraq&m=108999466902690&w=2, http://secunia.com/advisories/11055, http://secunia.com/advisories/20168
CVE-2004-2502
im-switch before 11.4-46.1 in Fedora Core 2 allows local users to overwrite arbitrary files via a symlink attack on the imswitcher[PID] temporary file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: im-switch
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126940, http://packetstormsecurity.org/0407-advisories/fedora_im-switch_tempfile_race.txt, http://secunia.com/advisories/12037
CVE-2004-0237
Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via a full pathname in the show parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aprox_portal
References: http://marc.info/?l=bugtraq&m=107577555527321&w=2, http://securitytracker.com/id?1008915, http://www.osvdb.org/10859
CVE-2004-1985
Cross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to inject arbitrary HTML or web script via the CPG_URL parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke, coppermine_photo_gallery
References: http://marc.info/?l=bugtraq&m=108360247732014&w=2, http://secunia.com/advisories/11524, http://www.osvdb.org/5757
CVE-2004-2225
Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: firefox
References: http://secunia.com/advisories/12708, http://securitytracker.com/id?1011501, http://www.mozilla.org/projects/security/older-vulnerabilities.html#firefox0.10.1
CVE-2004-2022
ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to the system command, which leads to a stack-based buffer overflow.  NOTE: it is unclear whether this bug is in Perl or the OS API that is used by Perl.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: activeperl
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0905.html, http://marc.info/?l=bugtraq&m=108489894009025&w=2, http://marc.info/?l=full-disclosure&m=108482796105922&w=2
CVE-2004-1032
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux, fcron
References: http://security.gentoo.org/glsa/glsa-200411-27.xml, http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false, https://exchange.xforce.ibmcloud.com/vulnerabilities/18077
CVE-2004-0803
Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, suse_linux, secure_linux, kde, mandrake_linux
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888, http://marc.info/?l=bugtraq&m=109778785107450&w=2, http://scary.beasts.org/security/CESA-2004-006.txt
CVE-2004-1615
Opera allows remote attackers to cause a denial of service (invalid memory reference and application crash) via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: opera_browser
References: http://lcamtuf.coredump.cx/mangleme/gallery/, http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html, http://marc.info/?l=bugtraq&m=109811406620511&w=2
CVE-2004-2044
PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER['PHP_SELF'] to identify the calling script, which allows remote attackers to directly access scripts, obtain path information via a PHP error message, and possibly gain access, as demonstrated using an HTTP request that contains the "admin.php" string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_linux, php-nuke, osc2nuke, betanc_php-nuke
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0005.html, http://archives.neohapsis.com/archives/bugtraq/2004-06/0006.html, http://marc.info/?l=bugtraq&m=108611606320559&w=2
CVE-2004-1496
Directory traversal vulnerability in Web Forums Server 1.6 and 2.0 Power Pack allows remote attackers to read arbitrary files via a URL containing (1) "..\" (dot dot backslash), (2) "../" (dot dot slash), (3) "/%2E%2E%5C" (encoded dot dot backslash), or (4) "%2E%2E%2F" (encoded dot dot slash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_forums_server
References: http://marc.info/?l=bugtraq&m=109943267328552&w=2, http://marc.info/?l=bugtraq&m=109943267328552&w=2
CVE-2004-0415
Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel, secure_linux, fedora_core
References: ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000879, http://www.gentoo.org/security/en/glsa/glsa-200408-24.xml
CVE-2004-2379
Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: at_mail_webmail_system
References: http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt, http://secunia.com/advisories/10978, http://www.osvdb.org/4066
CVE-2004-1823
Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote attackers to inject arbitrary web script or HTML via the (1) page parameter to showthread.php or (2) order parameter to forumdisplay.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vbulletin
References: http://marc.info/?l=bugtraq&m=107945556112453&w=2, http://secunia.com/advisories/11142, http://securitytracker.com/id?1009440
CVE-2004-1848
Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ws_ftp_server
Related CWEs: CWE-399
References: http://marc.info/?l=bugtraq&m=108006717731989&w=2, http://secunia.com/advisories/11206, http://securitytracker.com/id?1009529
CWE: CWE-399
CVE-2004-1662
YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: yabb
References: http://echo.or.id/adv/adv05-y3dips-2004.txt, http://marc.info/?l=bugtraq&m=109441750900432&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17267
CVE-2004-1294
The mget function in cmds.c for tnftp 20030825 allows remote FTP servers to overwrite arbitrary files via FTP responses containing file names with / (slash) characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: tnftp
References: http://tigger.uic.edu/~jlongs2/holes/tnftp.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18560, http://tigger.uic.edu/~jlongs2/holes/tnftp.txt
CVE-2004-1964
Cross-site scripting (XSS) vulnerability in nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to inject arbitrary web script or HTML via the portNum parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: network_query_tool
References: http://marc.info/?l=bugtraq&m=108276405108267&w=2, http://secunia.com/advisories/11479, http://www.securityfocus.com/bid/10205
CVE-2004-1437
Multiple buffer overflows in the digest authentication functionality in Pavuk 0.9.28-r2 and earlier allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pavuk
References: http://www.gentoo.org/security/en/glsa/glsa-200407-19.xml, http://www.securityfocus.com/bid/10797, https://exchange.xforce.ibmcloud.com/vulnerabilities/16807
CVE-2004-2427
Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to obtain sensitive information via direct requests to (1) admin/getparam.cgi, (2) admin/systemlog.cgi, (3) admin/serverreport.cgi, and (4) admin/paramlist.cgi, modify system information via (5) setparam.cgi and (6) factorydefault.cgi, or (7) cause a denial of service (reboot) via restart.cgi.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: 2110_network_camera, 2401_video_server, 230_mpeg2_video_server, 2400_video_server, 2490_serial_server
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html, http://securitytracker.com/id?1011056, http://www.osvdb.org/9123
CVE-2004-0907
The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thunderbird, mozilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=254303, http://security.gentoo.org/glsa/glsa-200409-26.xml, http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3
CVE-2004-2210
Multiple cross-site scripting (XSS) vulnerabilities in Express-Web Content Management System (CMS) allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the (1) n, (2) b, (3) e, or (4) a parameters to default.asp, (5) the Referer header in an HTTP request to login.asp, or (6) the email parameter to subscribe/default.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: express-web_content_management_system
References: http://www.maxpatrol.com/advdetails.asp?id=12, http://www.maxpatrol.com/mp_advisory.asp, http://www.securityfocus.com/bid/11426
CVE-2004-2069
sshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege separation, does not properly signal the non-privileged process when a session has been terminated after exceeding the LoginGraceTime setting, which leaves the connection open and allows remote attackers to cause a denial of service (connection consumption).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openssh
References: http://marc.info/?l=openssh-unix-dev&m=107520317020444&w=2, http://marc.info/?l=openssh-unix-dev&m=107529205602320&w=2, http://rhn.redhat.com/errata/RHSA-2005-550.html
CVE-2004-2735
Cross-site scripting (XSS) vulnerability in P4DB 2.01 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) SET_PREFERENCES parameter in SetPreferences.cgi; (2) BRANCH parameter in branchView.cgi; (3) FSPC and (4) COMPLETE parameters in changeByUsers.cgi; (5) FSPC, (6) LABEL, (7) EXLABEL, (8) STATUS, (9) MAXCH, (10) FIRSTCH, (11) CHOFFSETDISP, (12) SEARCHDESC, (13) SEARCH_INVERT, (14) USER, (15) GROUP, and (16) CLIENT parameters in changeList.cgi; (17) CH parameter in changeView.cgi; (18) USER parameter in clientList.cgi; (19) CLIENT parameter in clientView.cgi; (20) FSPC parameter in depotTreeBrowser.cgi; (21) FSPC parameter in depotStats.cgi; (22) FSPC, (23) REV, (24) ACT, (25) FSPC2, (26) REV2, (27) CH, and (28) CONTEXT parameters in fileDiffView.cgi; (29) FSPC and (30) REV parameters in fileDownLoad.cgi; (31) FSPC, (32) LISTLAB, and (33) SHOWBRANCH parameters in fileLogView.cgi; (34) FSPC and (35) LABEL parameters in fileSearch.cgi; (36) FSPC, (37) REV, and (38) FORCE parameters in fileViewer.cgi; (39) FSPC parameter in filesChangedSince.cgi; (40) GROUP parameter in groupView.cgi; (41) TYPE, (42) FSPC, and (43) REV parameters in htmlFileView.cgi; (44) CMD parameter in javaDataView.cgi; (45) JOBVIEW and (46) FLD parameters in jobList.cgi; (47) JOB parameter in jobView.cgi; (48) LABEL1 and (49) LABEL2 parameters in labelDiffView.cgi; (50) LABEL parameter in labelView.cgi; (51) FSPC parameter in searchPattern.cgi; (52) TYPE, (53) FSPC, and (54) REV parameters in specialFileView.cgi; (55) GROUPSONLY parameter in userList.cgi; or (56) USER parameter in userView.cgi.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: p4db
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0046.html, http://secunia.com/advisories/11559, http://securitytracker.com/id?1010078
CWE: CWE-79
CVE-2004-1901
Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: portage, linux
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://secunia.com/advisories/11305, http://security.gentoo.org/glsa/glsa-200404-01.xml, http://www.securityfocus.com/bid/10060
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2004-0608
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: devastation, wheel_of_time, unreal_tournament, unreal_engine, mobile_forces
References: http://aluigi.altervista.org/adv/unsecure-adv.txt, http://marc.info/?l=bugtraq&m=108787105023304&w=2, http://www.gentoo.org/security/en/glsa/glsa-200407-14.xml
CVE-2004-2473
wmFrog weather monitor 0.1.6 and other versions before 0.2.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: wmfrog
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=294352, http://secunia.com/advisories/13259, http://secunia.com/advisories/25686
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2004-0944
The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mitel_3300_integrated_communication_platform
References: http://www.corsaire.com/advisories/c040817-002.txt, http://www.mitel.com/DocController?documentId=14223, http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en
CVE-2004-1530
SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the (1) eid or (2) cid parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke_event_calendar
References: http://marc.info/?l=bugtraq&m=110064626111756&w=2, http://secunia.com/advisories/13213, http://www.securityfocus.com/bid/11693
CVE-2004-2232
SQL injection vulnerability in sql.php in the Glossary module in Moodle 1.4.1 and earlier allows remote attackers to modify SQL statements.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: moodle
References: http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/mod/glossary/sql.php?r1=1.15.2.2&amp%3Br2=1.15.2.3, http://secunia.com/advisories/13091, http://securitytracker.com/id?1012113
CVE-2004-0362
Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: proventia_g_series_xpu, proventia_a_series_xpu, blackice_server_protection, blackice_agent_server, realsecure_server_sensor
References: http://marc.info/?l=bugtraq&m=107965651712378&w=2, http://secunia.com/advisories/11073, http://www.ciac.org/ciac/bulletins/o-104.shtml
CVE-2004-0980
Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, linux, ez-ipupdate
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028590.html, http://secunia.com/advisories/13167/, http://www.debian.org/security/2004/dsa-592
CVE-2004-2403
Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: yabb
References: http://archives.neohapsis.com/archives/bugtraq/2004-09/0227.html, http://secunia.com/advisories/12593, http://www.osvdb.org/10243
CVE-2004-0720
Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: safari
References: http://secunia.com/advisories/11978, http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/, https://exchange.xforce.ibmcloud.com/vulnerabilities/1598
CVE-2004-1634
show_bug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bugzilla
References: http://marc.info/?l=bugtraq&m=109872095201238&w=2, http://www.securityfocus.com/bid/11511, https://bugzilla.mozilla.org/show_bug.cgi?id=263780
CVE-2004-0300
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_brand.php, or (4) the id parameter in listing.php.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: store_kit
References: http://marc.info/?l=bugtraq&m=107712117913185&w=2, http://secunia.com/advisories/10902/, http://securitytracker.com/alerts/2004/Feb/1009092.html
CVE-2004-1405
MediaWiki 1.3.8 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mediawiki
References: http://marc.info/?l=bugtraq&m=110321710420059&w=2, http://secunia.com/advisories/13478/, http://wikipedia.sourceforge.net/
CVE-2004-0927
ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x_server, mac_os_x, cups
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html, http://www.securityfocus.com/bid/11322, http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE-2004-2558
Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allow remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka "Potential Credential Impersonation Attack."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tivoli_access_manager_identity_manager_solution, tivoli_secureway_policy_director, tivoli_configuration_manager_for_atm, tivoli_access_manager_for_e-business, websphere_everyplace_server
References: http://secunia.com/advisories/11761, http://www-1.ibm.com/support/docview.wss?uid=swg21168762, http://www.securityfocus.com/bid/10449
CVE-2004-2053
PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the site parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: easyins
References: http://marc.info/?l=bugtraq&m=109069241512694&w=2, http://securitytracker.com/id?1010769, http://www.osvdb.org/8233
CVE-2004-1408
The addImage method for admin.class.php in Image Gallery Web Application 0.9.10 does not properly check filenames, which allows remote attackers to upload and execute arbitrary files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: image_gallery_web_application
References: http://marc.info/?l=bugtraq&m=110323479715051&w=2, http://www.securityfocus.com/bid/11990, https://exchange.xforce.ibmcloud.com/vulnerabilities/18531
CVE-2004-0205
Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: definity_one_media_server, modular_messaging_message_storage_server, internet_information_server, s8100, ip600_media_servers
References: http://secunia.com/advisories/12061, http://www.ciac.org/ciac/bulletins/o-179.shtml, http://www.kb.cert.org/vuls/id/717748
CVE-2004-2478
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jetty_http_server, unicenter_web_services_distributed_management, trading_partner_interchange
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049846.html, http://secunia.com/advisories/12703, http://secunia.com/advisories/22229
CVE-2004-2194
MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service (crash) via malformed (1) SMTP or (2) IMAP commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mailenable_enterprise, mailenable_professional
References: http://www.mailenable.com/enterprisehistory.asp, http://www.mailenable.com/professionalhistory.asp, http://www.securityfocus.com/bid/11418
CVE-2004-1341
Cross-site scripting (XSS) vulnerability in info2www before 1.2.2.9 allows remote attackers to inject arbitrary web script or HTML via the arguments to info2www.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: info2www
References: http://www.debian.org/security/2005/dsa-711, https://exchange.xforce.ibmcloud.com/vulnerabilities/20179, http://www.debian.org/security/2005/dsa-711
CVE-2004-2270
Unknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute arbitrary commands as root via unknown vectors in the sample code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: parallel_environment
References: http://secunia.com/advisories/11580, http://securitytracker.com/id?1010109, http://www.osvdb.org/6008
CVE-2004-1278
Buffer overflow in the switch_voice function in parse.c for jcabc2ps 20040902 allows remote attackers to execute arbitrary code via a crafted ABC file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jcabc2ps, abc2ps
References: http://tigger.uic.edu/~jlongs2/holes/jcabc2ps.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18563, http://tigger.uic.edu/~jlongs2/holes/jcabc2ps.txt
CVE-2004-1138
VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vim
References: http://marc.info/?l=bugtraq&m=110313588125609&w=2, http://www.gentoo.org/security/en/glsa/glsa-200412-10.xml, http://www.redhat.com/support/errata/RHSA-2005-010.html
CVE-2004-2356
Early termination vulnerability in Fizmez Web Server 1.0 allows remote attackers to cause a denial of service (crash) by connecting to the server and then disconnecting without sending any data, which triggers a null pointer dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fizmez_web_server
References: http://secunia.com/advisories/11141/, http://securitytracker.com/id?1009451, http://www.autistici.org/fdonato/advisory/fws1.0-adv.txt
CVE-2004-0175
Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files.  NOTE: this may be a rediscovery of CVE-2000-0992.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: openssh
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000831, http://secunia.com/advisories/17135
CWE: CWE-22
CVE-2004-0712
The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 create a log file that contains the administrative username and password in cleartext, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_58.00.jsp, http://www.kb.cert.org/vuls/id/574222, http://www.securityfocus.com/bid/10188
CVE-2004-2612
BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote attackers to use the functionality intended for authorized users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bnc
References: http://secunia.com/advisories/13302, http://www.gotbnc.com/changes.html#2.9.1, http://www.osvdb.org/12144
CVE-2004-2728
Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service (application crash) via a long argument to the XCWD command.
CVSS v2.0 Score: 3.5 (LOW)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:N/I:N/A:P
Affected Products: connectivity
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://secunia.com/advisories/12984, http://securitytracker.com/id?1011942, http://www.osvdb.org/11133
CWE: CWE-119
CVE-2004-0058
Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_antivir_$$ temporary file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=107402026023763&w=2, http://secunia.com/advisories/10620, http://www.osvdb.org/3496
CVE-2004-1629
Multiple SQL injection vulnerabilities in Dwc_articles 1.6 and earlier allow remote attackers to execute arbitrary SQL statements.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dwc_articles
References: http://marc.info/?l=bugtraq&m=109855895702903&w=2, http://www.securityfocus.com/bid/11509, https://exchange.xforce.ibmcloud.com/vulnerabilities/17830