DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0939
changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: instant_virtual_extranet
References: http://marc.info/?l=bugtraq&m=109709990708794&w=2, http://secunia.com/advisories/12752, http://securitytracker.com/id?1011552
CVE-2004-1025
Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: imlib, linux
References: http://www.mandriva.com/security/advisories?name=MDKSA-2005:007, http://www.redhat.com/support/errata/RHSA-2004-651.html, http://www.securityfocus.com/bid/11830
CVE-2004-1358
The patches (1) 114332-08 and (2) 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security Module (BSM), which allows attackers to avoid having their activity logged.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57478-1&searchclause=%22category:security%22%20%20114332-08, http://www.auscert.org.au/render.html?it=3788, http://www.ciac.org/ciac/bulletins/o-099.shtml
CVE-2004-1737
SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cacti, linux
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html, http://marc.info/?l=bugtraq&m=109272483621038&w=2, http://secunia.com/advisories/12308
CVE-2004-0072
Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \.. (backslash .., "%5c%2e%2e") sequences in an HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: accipiter_direct_server
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0274.html, http://marc.info/?l=bugtraq&m=107392576215418&w=2, http://secunia.com/advisories/10600
CVE-2004-2010
PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the base_dir parameter to reference a URL on a remote web server that contains phpshop.cfg.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpshop
References: http://marc.info/?l=bugtraq&m=108420702317870&w=2, http://secunia.com/advisories/11587, http://www.fribble.net/advisories/phpshop_29-04-04.txt
CVE-2004-1323
Multiple syscalls in the compat subsystem for NetBSD before 2.0 allow local users to cause a denial of service (kernel crash) via a large signal number to (1) xxx_sys_kill, (2) xxx_sys_sigaction, and possibly other translation functions.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netbsd
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-010.txt.asc, http://gleg.net/advisory_netbsd2.shtml, http://secunia.com/advisories/13501/
CVE-2004-1189
The add_to_history function in svr_principal.c in libkadm5srv for MIT Kerberos 5 (krb5) up to 1.3.5, when performing a password change, does not properly track the password policy's history count and the maximum number of keys, which can cause an array index out-of-bounds error and may allow authenticated users to execute arbitrary code via a heap-based buffer overflow.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kerberos_5
Related CWEs: CWE-787
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000917, http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
CWE: CWE-787
CVE-2004-0960
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, freeradius, fedora_core
References: http://security.gentoo.org/glsa/glsa-200409-29.xml, http://www.kb.cert.org/vuls/id/541574, http://www.securityfocus.com/bid/11222
CVE-2004-1379
Heap-based buffer overflow in the DVD subpicture decoder in xine xine-lib 1-rc5 and earlier allows remote attackers to execute arbitrary code via a (1) DVD or (2) MPEG subpicture header where the second field reuses RLE data from the end of the first field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xine, xine-lib
References: http://slackware.com/security/viewer.php?l=slackware-security&y=2004&m=slackware-security.320308, http://www.debian.org/security/2005/dsa-657, http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml
CVE-2004-0407
The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: coldfusion
References: http://marc.info/?l=bugtraq&m=108213782629001&w=2, http://secunia.com/advisories/11392, http://securitytracker.com/id?1009825
CVE-2004-0115
VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: virtual_pc
References: http://www.atstake.com/research/advisories/2004/a021004-1.txt, http://www.ciac.org/ciac/bulletins/o-076.shtml, http://www.osvdb.org/3893
CVE-2004-1068
A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, linux_kernel, linux_advanced_workstation, enterprise_linux_desktop, ubuntu_linux
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U, http://marc.info/?l=bugtraq&m=110306397320336&w=2, http://secunia.com/advisories/19607
CVE-2004-0787
Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: openca
References: http://marc.info/?l=bugtraq&m=109448767123954&w=2, http://www.openca.org/news/CAN-2004-0787.txt, http://www.securityfocus.com/bid/11113
CVE-2004-2388
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://secunia.com/advisories/11085, http://www-1.ibm.com/support/docview.wss?uid=isg1IY53507, http://www.ciac.org/ciac/bulletins/o-102.shtml
CVE-2004-1393
Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a denial of service (system hang).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://secunia.com/advisories/10730/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57474-1, http://www.auscert.org.au/render.html?it=3806
CVE-2004-1862
Multiple cross-site scripting (XSS) vulnerabilities in Extreme Messageboard (XMB) 1.8 SP3 and 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) xmbuser parameter to xmb.php, (2) folder parameter to u2u.php, (3) viewmost, replymost, or latest parameter to stats.php, (4) message or icons parameter to post.php, (5) threadlist, pagelinks, forumlist, navigation, or (6) forumdisplay parameter to forumdisplay.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: xmb
References: http://marc.info/?l=bugtraq&m=108032355905265&w=2, http://osvdb.org/14983, http://osvdb.org/14985
CVE-2004-1819
4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 4nalbum_module
References: http://marc.info/?l=bugtraq&m=107937780222514&w=2, http://secunia.com/advisories/11134, http://www.osvdb.org/4291
CVE-2004-0109
Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
CVE-2004-1319
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mobile_voice_client_2050, windows_2000, ip_softphone_2050, optivity_telephony_manager, windows_98
References: http://archives.neohapsis.com/archives/bugtraq/2004-12/0167.html, http://freehost07.websamba.com/greyhats/abusiveparent-discussion.htm, http://secunia.com/advisories/13482/
CVE-2004-2472
Agnitum Outpost Pro Firewall 2.1 allows remote attackers to cause a denial of service (CPU consumption) via a flood of small, invalid packets, which can not be processed quickly enough by Outpost Pro.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outpost_firewall
References: http://secunia.com/advisories/11601, http://securitytracker.com/alerts/2004/May/1010151.html, http://www.osvdb.org/6110
CVE-2004-2062
SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the (1) thread_id, (2) parent_id, or (3) mode parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: antiboard
References: http://marc.info/?l=bugtraq&m=109105610220965&w=2, http://secunia.com/advisories/12137, http://www.securityfocus.com/bid/10821
CVE-2004-0827
Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, suse_linux, linux, java_desktop_system, mandrake_linux
References: http://secunia.com/advisories/28800, http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1, http://sunsolve.sun.com/search/document.do?assetkey=1-66-201006-1
CVE-2004-2634
The (1) bos.rte.serv_aid or (2) bos.rte.console filesets in IBM AIX 5.1 and 5.2 allow local users to overwrite arbitrary files via a symlink attack on temporary files via unknown attack vectors.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://secunia.com/advisories/11496, http://securitytracker.com/id?1009975, http://www-1.ibm.com/support/search.wss?rs=0&q=IY55789&apar=only
CVE-2004-2707
Multiple unspecified vulnerabilities in Gyach Enhanced (Gyach-E) before 1.0.5 have unknown impact and attack vectors related to "several security flaws," probably related to buffer overflows in HTTP server responses.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gyach_enhanced
References: http://securitytracker.com/id?1011058, http://www.osvdb.org/8937, http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php
CVE-2004-0833
Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux
References: http://secunia.com/advisories/12667, http://www.debian.org/security/2004/dsa-554, http://www.securityfocus.com/bid/11262
CVE-2004-1704
WpQuiz 2.60b1 through 2.60b8 allows remote attackers to gain privileges via a direct request to adminrestore.php in the extras directory.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wpquiz
References: http://marc.info/?l=bugtraq&m=109122270013514&w=2, http://www.osvdb.org/8321, https://exchange.xforce.ibmcloud.com/vulnerabilities/16848
CVE-2004-0199
Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: windows_xp, windows_2003_server
References: http://marc.info/?l=bugtraq&m=108437759930820&w=2, http://marc.info/?l=full-disclosure&m=108430407801825&w=2, http://www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt
CVE-2004-1787
SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: postcalendar
References: http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2537, http://secunia.com/advisories/10554, http://securitytracker.com/id?1008621
CVE-2004-0375
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: norton_internet_security, client_security, norton_personal_firewall, client_firewall
References: http://marc.info/?l=bugtraq&m=108275582432246&w=2, http://securitytracker.com/id?1009379, http://securitytracker.com/id?1009380
CVE-2004-0976
Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: perl
References: http://fedoranews.org/updates/FEDORA--.shtml, http://marc.info/?l=bugtraq&m=110547693019788&w=2, http://secunia.com/advisories/17661
CVE-2004-2258
Xconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected, allows local users to access certain options by switching to another tab, then switching back to the original tab.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: exceed
References: http://secunia.com/advisories/11678, http://support.hummingbird.com/customer/download.asp?r2=/exceed/900/xconfig_9002.zip, http://www.osvdb.org/6304
CVE-2004-0483
Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040503-01-P, http://secunia.com/advisories/11628, http://securitytracker.com/id?1010185
CVE-2004-0596
The Equalizer Load-balancer for serial network interfaces (eql.c) in Linux kernel 2.6.x up to 2.6.7 allows local users to cause a denial of service via a non-existent device name that triggers a null dereference.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://linux.bkbits.net:8080/linux-2.6/cset%4040d4aa72hPLWy-jMLr0eJAXMxHcNZg, http://www.securityfocus.com/bid/10730, https://exchange.xforce.ibmcloud.com/vulnerabilities/16694
CVE-2004-1289
Multiple buffer overflows in (1) the getline function in pcalutil.c and (2) the get_holiday function in readfile.c for pcal 4.7.1 allow remote attackers to execute arbitrary code via a crafted calendar file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pcal
References: http://tigger.uic.edu/~jlongs2/holes/pcal.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18552, http://tigger.uic.edu/~jlongs2/holes/pcal.txt
CVE-2004-2546
Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: samba, secure_linux
References: http://www.samba.org/samba/history/samba-3.0.6.html, http://www.trustix.org/errata/2004/0043, https://exchange.xforce.ibmcloud.com/vulnerabilities/17139
CVE-2004-1460
Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_acs_solution_engine, secure_access_control_server
References: http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml, http://www.securityfocus.com/bid/11047, https://exchange.xforce.ibmcloud.com/vulnerabilities/17117
CVE-2004-0514
Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups."
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html, http://securitytracker.com/id?1010330, http://www.kb.cert.org/vuls/id/174790
CVE-2004-0872
Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: opera_browser
Related CWEs: CWE-669
References: http://securityfocus.com/archive/1/375407, http://securitytracker.com/id?1011329, http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt
CWE: CWE-669
CVE-2004-0028
jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jitterbug
References: http://www.debian.org/security/2004/dsa-420, http://www.securityfocus.com/bid/9397, https://exchange.xforce.ibmcloud.com/vulnerabilities/14207
CVE-2004-0791
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt, http://marc.info/?l=bugtraq&m=112861397904255&w=2, http://secunia.com/advisories/18317
CVE-2004-2507
Absolute path traversal vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to read arbitrary files via an absolute pathname in the next_file parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wvc11b
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0103.html, http://secunia.com/advisories/11811/, http://securitytracker.com/id?1010489
CVE-2004-2383
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain focus.  NOTE: the discloser claimed that the vendor does not categorize this as a vulnerability, but it can be used in a spoofing scenario; the discloser provides alternate scenarios. Spoofing scenarios are currently included in CVE.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: ie, internet_explorer
References: http://www.idefense.com/application/poi/display?id=77&type=vulnerabilities&flashstatus=false, http://www.securityfocus.com/bid/9761, https://exchange.xforce.ibmcloud.com/vulnerabilities/15337
CVE-2004-2484
Cross-site scripting (XSS) vulnerability in PHP Gift Registry 1.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter to (1) event.php or (2) index.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpgiftreg
References: http://cvs.sourceforge.net/viewcvs.py/phpgiftreg/src/event.php?r1=1.4&r2=1.5, http://cvs.sourceforge.net/viewcvs.py/phpgiftreg/src/index.php?r1=1.20&r2=1.21, http://secunia.com/advisories/13414
CVE-2004-1624
Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe).
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: carbon_copy
References: http://marc.info/?l=bugtraq&m=109846296406459&w=2, http://secunia.com/advisories/12962, http://www.securityfocus.com/bid/11500
CVE-2004-2274
Unknown vulnerability in Jigsaw before 2.2.4 has unknown impact and attack vectors, possibly related to the parsing of the URI.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: jigsaw
References: http://secunia.com/advisories/10975, http://securitytracker.com/id?1009169, http://www.osvdb.org/4014
CVE-2004-2347
blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requests.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_blog
References: http://leifwright.com/scripts/Blog.html, http://secunia.com/advisories/10776/, http://www.osvdb.org/3793
CVE-2004-1713
Unknown vulnerability in HP Process Resource Manager (PRM) C.02.01[.01] and earlier, as used by HP-UX Workload Manager (WLM), allows local users to corrupt data files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: workload_manager, process_resource_manager
References: http://marc.info/?l=bugtraq&m=109215093809027&w=2, http://secunia.com/advisories/12245, http://www.securityfocus.com/bid/10907
CVE-2004-0831
McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: virusscan
References: http://marc.info/?l=bugtraq&m=109526269429728&w=2, http://www.idefense.com/application/poi/display?id=140&type=vulnerabilities, https://exchange.xforce.ibmcloud.com/vulnerabilities/17367
CVE-2004-2166
The print-from-email feature in the Canon ImageRUNNER (iR) 5000i and C3200 digital printer, when not using IP address range filtering, allows remote attackers to print arbitrary text without authentication via a text/plain email to TCP port 25.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imagerunner_c3200, imagerunner_5000i
References: http://secunia.com/advisories/12659/, http://www.securityfocus.com/archive/1/376242, http://www.securityfocus.com/bid/11247
CVE-2004-2594
Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a pathname argument, as demonstrated by "download \/server.cfg".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: quake_ii_server_windows
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html, http://secunia.com/advisories/13013, http://secur1ty.net/advisories/001
CVE-2004-1692
Cross-site scripting (XSS) vulnerability in index.php in Mambo 4.5 (1.0.9) allows remote attackers to inject arbitrary web script or HTML via the (1) Itemid, (2) mosmsg, or (3) limit parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mambo_open_source
References: http://mamboforge.net/frs/shownotes.php?release_id=1672, http://marc.info/?l=bugtraq&m=109571849713158&w=2, http://www.osvdb.org/10179
CVE-2004-1280
The gui_popup_view_fly function in gui_tview_popup.c for junkie 0.3.1 allows remote malicious FTP servers to execute arbitrary commands via shell metacharacters in a filename.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: junkie_ftp_client
References: http://tigger.uic.edu/~jlongs2/holes/junkie.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18567, http://tigger.uic.edu/~jlongs2/holes/junkie.txt
CVE-2004-0317
Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long LSF_From_PC parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lsf
References: http://marc.info/?l=bugtraq&m=107756611501236&w=2, http://www.securityfocus.com/bid/9719, https://exchange.xforce.ibmcloud.com/vulnerabilities/15282
CVE-2004-0866
Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, firefox, internet_explorer, konqueror, ie
References: http://marc.info/?l=bugtraq&m=109536612321898&w=2, http://securitytracker.com/id?1011332, http://www.securityfocus.com/bid/11186
CVE-2004-1880
Memory leak in the back-bdb backend for OpenLDAP 2.1.12 and earlier allows remote attackers to cause a denial of service (memory consumption).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openldap
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000685, http://secunia.com/advisories/9203, http://www.osvdb.org/17000
CVE-2004-1935
Cross-site scripting (XSS) vulnerability in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via onload, onmouseover, and other Javascript events in an e-mail attachment.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: campus_pipeline
References: http://marc.info/?l=bugtraq&m=108207280917231&w=2, http://secunia.com/advisories/11396, http://www.securityfocus.com/bid/10154
CVE-2004-2713
Zone Alarm Pro 1.0 through 5.1 gives full access to %windir%\Internet Logs\* to the EVERYONE group, which allows local users to cause a denial of service by modifying the folder contents or permissions. NOTE: this issue has been disputed by the vendor, who claims that it does not affect product functionality since the same information is also saved in a protected file
CVSS v2.0 Score: 1.9 (LOW)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P
Affected Products: zonealarm
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2004-08/0389.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0871.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0883.html
CWE: CWE-264
CVE-2004-1983
The arch_get_unmapped_area function in mmap.c in the PaX patches for Linux kernel 2.6, when Address Space Layout Randomization (ASLR) is enabled, allows local users to cause a denial of service (infinite loop) via unknown attack vectors.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pax_linux, linux
References: http://marc.info/?l=bugtraq&m=108360001130312&w=2, http://marc.info/?l=bugtraq&m=108420555920369&w=2, http://pax.grsecurity.net/
CVE-2004-1050
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: s3400, modular_messaging_message_storage_server, internet_explorer, s8100, definity_one_media_server
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028009.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028035.html, http://marc.info/?l=bugtraq&m=109942758911846&w=2
CVE-2004-2191
Cross-site scripting (XSS) vulnerability in ttt-webmaster.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) msg[0] or (2) siteurl parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: turbotraffictrader_php
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0296.html, http://secunia.com/advisories/12785, http://securitytracker.com/id?1011609
CVE-2004-1795
Info Touch Surfnet kiosk allows local users to access the underlying filesystem via a 'file://' URI.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: surfnet
References: http://www.securityfocus.com/bid/9346, http://www.securityfocus.com/bid/9346
CVE-2004-2167
Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: latex2rtf
References: http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log, http://www.osvdb.org/displayvuln.php?osvdb_id=10216, http://www.securityfocus.com/bid/11233
CVE-2004-2058
ASPRunner 2.4 allows remote attackers to gain sensitive information via (1) hidden form fields or (2) error messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: asprunner
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html, http://ferruh.mavituna.com/article/?574, http://marc.info/?l=bugtraq&m=109086977330418&w=2
CVE-2004-0946
rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, enterprise_linux_desktop, nfs-utils
References: http://bugs.gentoo.org/show_bug.cgi?id=72113, http://secunia.com/advisories/13440/, http://www.gentoo.org/security/en/glsa/glsa-200412-08.xml
CVE-2004-1582
PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by modifying the libpath parameter (incorrectly called "libpach") to reference a URL on a remote web server that contains _more.php, as demonstrated using checkdb.inc.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: blackboard_internet_newsboard_system
References: http://blackboard.unclassified.de/70%2C1#1031, http://marc.info/?l=bugtraq&m=109707701719659&w=2, http://secunia.com/advisories/12757
CVE-2004-1037
The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux, twiki
References: http://archives.neohapsis.com/archives/bugtraq/2004-11/0201.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000918, http://marc.info/?l=bugtraq&m=110037207516456&w=2
CVE-2004-0080
The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sensitive data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: util-linux
References: ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U, http://marc.info/?l=bugtraq&m=108077689801698&w=2
CVE-2004-1821
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 4nalbum_module
References: http://marc.info/?l=bugtraq&m=107937780222514&w=2, http://secunia.com/advisories/11134, http://www.osvdb.org/4294
CVE-2004-0772
Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, openpkg, kerberos_5
Related CWEs: CWE-415
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860, http://marc.info/?l=bugtraq&m=109508872524753&w=2, http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt
CWE: CWE-415
CVE-2004-2520
POP3 protocol in Gattaca Server 2003 1.1.10.0 allows remote authenticated users to cause a denial of service (application crash) via a large numeric value in the (1) LIST, (2) RETR, or (3) UIDL commands.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Affected Products: gattaca_server_2003
References: http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt, http://secunia.com/advisories/12071, http://securitytracker.com/id?1010703
CVE-2004-1117
The init scripts in ChessBrain 20407 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml, https://exchange.xforce.ibmcloud.com/vulnerabilities/18149, http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml
CVE-2004-1306
Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, windows_xp, windows_2003_server
References: http://marc.info/?l=bugtraq&m=110383690219440&w=2, http://www.securityfocus.com/bid/12092, http://www.xfocus.net/flashsky/icoExp/
CVE-2004-0083
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd, x11r6
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821, http://marc.info/?l=bugtraq&m=107644835523678&w=2, http://marc.info/?l=bugtraq&m=107653324115914&w=2
CVE-2004-1386
TikiWiki before 1.8.4.1 does not properly verify uploaded images, which could allow remote attackers to upload and execute arbitrary PHP scripts, a different vulnerability than CVE-2005-0200.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tikiwiki_cms//groupware
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://securitytracker.com/id?1012700, http://tikiwiki.org/tiki-read_article.php?articleId=97, http://www.ciac.org/ciac/bulletins/p-084.shtml
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-2538
Direct static code injection vulnerability in the PCG simple application generation in phpCodeGenie before 3.0.2 allows remote authenticated users to execute arbitrary code via the (1) header or (2) footer.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: phpcodegenie
References: http://phpcodegenie.sourceforge.net/phpCodeGenie/docs/ChangeLog.txt, http://secunia.com/advisories/12853, http://securitytracker.com/id?1011911
CVE-2004-2328
Clearswift MAILsweeper for SMTP before 4.3_13 allows remote attackers to cause a denial of service (infinite loop) via an e-mail with a crafted RAR archive attached.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mailsweeper
References: http://www.osvdb.org/3742, http://www.secunia.com/advisories/10732/, http://www.securityfocus.com/bid/9556
CVE-2004-0240
Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument to auth.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: x-cart
References: http://marc.info/?l=bugtraq&m=107582648326448&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/15033, http://marc.info/?l=bugtraq&m=107582648326448&w=2
CVE-2004-1312
A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mailessentials, mailsecurity
References: http://kbase.gfi.com/showarticle.asp?id=KBID002249, http://secunia.com/advisories/13708, http://www.csis.dk/default.asp?m=1&a=194
CVE-2004-1119
Stack-based buffer overflow in IN_CDDA.dll in Winamp 5.05, and possibly other versions including 5.06, allows remote attackers to execute arbitrary code via a certain .m3u playlist file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: winamp
References: http://archives.neohapsis.com/archives/bugtraq/2004-11/0369.html, http://marc.info/?l=bugtraq&m=110123330404482&w=2, http://marc.info/?l=bugtraq&m=110146036300803&w=2
CVE-2004-2736
Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cookie.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: helpdesk
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://secunia.com/advisories/12120, http://www.osvdb.org/8168, http://www.securiteam.com/windowsntfocus/5OP0K0ADGA.html
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2004-1185
Enscript 1.6.3 does not sanitize filenames, which allows remote attackers or local users to execute arbitrary commands via crafted filenames.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enscript
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html, http://secunia.com/advisories/35074, http://securitytracker.com/id?1012965
CVE-2004-1017
Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://secunia.com/advisories/19374, http://secunia.com/advisories/20162, http://secunia.com/advisories/20163
CVE-2004-2748
viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: reporting_center
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://secunia.com/advisories/10689, http://securityreason.com/securityalert/3354, http://www.osvdb.org/3680
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2004-2620
The MIMEH_read_headers function in ripMIME 1.3.1.0 does not properly handle trailing "\r" and "\n" characters in headers, which leads to a buffer underflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ripmime
References: http://www.osvdb.org/8731, http://www.pldaniels.com/ripmime/CHANGELOG, http://www.osvdb.org/8731
CVE-2004-0724
The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmented packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: half-life_dedicated_server, half-life
References: http://marc.info/?l=bugtraq&m=108966465302107&w=2, http://www.securityfocus.com/bid/10700, https://exchange.xforce.ibmcloud.com/vulnerabilities/16674
CVE-2004-1527
Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers to hijack web sessions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ie, internet_explorer
References: http://marc.info/?l=bugtraq&m=110053968530613&w=2, http://secunia.com/advisories/13208, http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/79_e.html
CVE-2004-0318
Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lsf
References: http://marc.info/?l=bugtraq&m=107756600403557&w=2, http://www.securityfocus.com/bid/9724, https://exchange.xforce.ibmcloud.com/vulnerabilities/15278
CVE-2004-1677
pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: perldesk
References: http://marc.info/?l=bugtraq&m=109509026406554&w=2, http://secunia.com/advisories/12512, https://exchange.xforce.ibmcloud.com/vulnerabilities/17343
CVE-2004-0547
Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: postgresql
References: http://www.debian.org/security/2004/dsa-516, http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:072, https://exchange.xforce.ibmcloud.com/vulnerabilities/16329
CVE-2004-0039
Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: firewall-1
References: http://marc.info/?l=bugtraq&m=107604682227031&w=2, http://www.checkpoint.com/techsupport/alerts/security_server.html, http://www.ciac.org/ciac/bulletins/o-072.shtml
CVE-2004-2521
Mail server in Gattaca Server 2003 1.1.10.0 allows remote attackers to perform a denial of service (application crash) via a large number of connections to TCP port (1) 25 (SMTP) or (2) 110 (POP).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gattaca_server_2003
References: http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt, http://secunia.com/advisories/12071, http://securitytracker.com/id?1010703
CVE-2004-0149
Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xboing
References: http://www.debian.org/security/2004/dsa-451, http://www.securityfocus.com/bid/9764, https://exchange.xforce.ibmcloud.com/vulnerabilities/15347