DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0135
The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc, http://secunia.com/advisories/11872, http://www.osvdb.org/7122
CVE-2004-2575
phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to (1) hook_admin.inc.php, (2) hook_home.inc.php, (3) class.holidaycalc.inc.php, and (4) setup.inc.php.sample, which reveals the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpgroupware
References: http://www.osvdb.org/7601, http://www.osvdb.org/7602, http://www.osvdb.org/7603
CVE-2004-2687
distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: samba, xcode
Related CWEs: CWE-16
References: http://archives.neohapsis.com/archives/bugtraq/2005-03/0183.html, http://distcc.samba.org/security.html, http://lists.samba.org/archive/distcc/2004q3/002550.html
CWE: CWE-16
CVE-2004-0126
The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:03.jail.asc, http://www.osvdb.org/4101, http://www.securityfocus.com/bid/9762
CVE-2004-2300
Buffer overflow in snmpd in ucd-snmp 4.2.6 and earlier, when installed setuid root, allows local users to execute arbitrary code via a long -p command line argument.  NOTE: it is not clear whether there are any standard configurations in which snmpd is installed setuid or setgid. If not, then this issue should not be included in CVE.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ucd-snmp
References: http://www.packetstormsecurity.org/0405-advisories/snmpdadv.txt, http://www.securityfocus.com/bid/10396, https://exchange.xforce.ibmcloud.com/vulnerabilities/16245
CVE-2004-2554
Novell Client Firewall (NCF) 2.0, as based on the Agnitum Outpost Firewall, allows local users to execute arbitrary code with SYSTEM privileges by opening the NCF tray icon and using the Help functionality to launch programs with SYSTEM privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: client_firewall
References: http://secunia.com/advisories/11014, http://securitytracker.com/id?1008755, http://support.novell.com/cgi-bin/search/searchtid.cgi?/10090585.htm
CVE-2004-0540
Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://secunia.com/advisories/11746/, http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B830847, http://secunia.com/advisories/11746/
CVE-2004-2257
phpMyFAQ 1.4.0 allows remote attackers to access the Image Manager to upload or delete images without authorization via a direct request.
CVSS v3.1 Score: 5.3 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phpmyfaq
Related CWEs: CWE-425
Related CAPECs: CAPEC-668, CAPEC-144, CAPEC-127
MITRE ATT&CK Techniques: T1565.002, T1083
MITRE ATT&CK Tactics: T1565
References: http://secunia.com/advisories/12085, http://securitytracker.com/id?1010795, http://www.osvdb.org/8240
CWE: CWE-425
MITRE ATT&CK techniques: T1565.002, T1083
MITRE ATT&CK tactics: T1565
CVE-2004-1161
rssh 2.2.2 and earlier does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via (1) rdist -P, (2) rsync, or (3) scp -S.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rssh, linux
References: http://marc.info/?l=bugtraq&m=110202047507273&w=2, http://marc.info/?l=bugtraq&m=110581113814623&w=2, http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml
CVE-2004-0584
Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting (XSS) vulnerability.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: imp
References: http://secunia.com/advisories/11805, http://www.gentoo.org/security/en/glsa/glsa-200406-11.xml, http://www.horde.org/imp/3.2/
CVE-2004-1392
PHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read arbitrary files via a file: URL argument to the curl_init function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php
References: http://marc.info/?l=bugtraq&m=109898213806099&w=2, http://marc.info/?l=bugtraq&m=110625060220934&w=2, http://securitytracker.com/id?1011984
CVE-2004-1882
Cross-site scripting (XSS) vulnerability in popuplargeimage.asp in CactuShop 5.x allows remote attackers to inject arbitrary web script or HTML via the strImageTag parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cactushop
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/019566.html, http://marc.info/?l=bugtraq&m=108075059013762&w=2, http://secunia.com/advisories/11272
CVE-2004-0032
Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: phpgedview
References: http://marc.info/?l=bugtraq&m=107340840209453&w=2, http://secunia.com/advisories/10565, http://www.osvdb.org/3402
CVE-2004-1353
Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC), allows local users to execute certain commands with additional privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://secunia.com/advisories/12873/, http://securitytracker.com/id?1011789, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57657-1&searchclause=%22category:security%22%20%22availability%2C%20security%22
CVE-2004-1736
Cacti 0.8.5a allows remote attackers to gain sensitive information via an HTTP request to (1) auth.php, (2) auth_login.php, (3) auth_changepassword.php, and possibly other php files, which reveal the installation path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cacti
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025376.html, http://marc.info/?l=bugtraq&m=109272483621038&w=2, http://secunia.com/advisories/12308
CVE-2004-0325
TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arguments to (1) mkd, (2) xmkd, (3) dele, (4) size, (5) retr, (6) stor, (7) appe, (8) rnfr, (9) rnto, (10) rmd, or (11) xrmd, as demonstrated using "//../qwerty".
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: typsoft_ftp_server
References: http://marc.info/?l=bugtraq&m=107764173821905&w=2, http://www.securityfocus.com/bid/9702, https://exchange.xforce.ibmcloud.com/vulnerabilities/15306
CVE-2004-0112
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: propack, edirectory, s8500, pix_firewall, openssl
Related CWEs: CWE-125
Related CAPECs: CAPEC-540
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc, ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000834
CWE: CWE-125
CVE-2004-1202
Cross-site scripting (XSS) vulnerability in parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to inject arbitrary web script or HTML via the file parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: phpcms
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html, http://marc.info/?l=bugtraq&m=110149207123510&w=2, http://www.phpcms.de/download/index.en.html
CVE-2004-0409
Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xchat
References: http://mail.nl.linux.org/xchat-announce/2004-04/msg00000.html, http://security.gentoo.org/glsa/glsa-200404-15.xml, http://www.fedoralegacy.org/updates/FC2/2005-11-14-FLSA_2005_123013
CVE-2004-2013
Integer overflow in the SCTP_SOCKOPT_DEBUG_NAME SCTP socket option in socket.c in the Linux kernel 2.4.25 and earlier allows local users to execute arbitrary code via an optlen value of -1, which causes kmalloc to allocate 0 bytes of memory.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
Related CWEs: CWE-190
Related CAPECs: CAPEC-92
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0091.html, http://lists.netsys.com/pipermail/full-disclosure/2004-May/021223.html, http://marc.info/?l=bugtraq&m=108456230815842&w=2
CWE: CWE-190
CVE-2004-1993
The patch to the checklogin function in omail.pl for omail webmail 0.98.5 is incomplete, which allows remote attackers to execute arbitrary commands via shell metacharacters such as "`" (backticks) in the password.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: omail_webmail
References: http://marc.info/?l=bugtraq&m=108377215015515&w=2, http://secunia.com/advisories/9585, http://www.securityfocus.com/bid/10274
CVE-2004-0575
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_xp, windows_2003_server
References: http://marc.info/?l=ntbugtraq&m=109767342326300&w=2, http://securitytracker.com/id?1011637, http://www.ciac.org/ciac/bulletins/p-010.shtml
CVE-2004-1870
Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat parameter to index.php, (5) ppuser parameter to showgallery.php, (6) cat parameter to showgallery.php, (7) cat parameter to uploadphoto.php, (8) albumid parameter to useralbums.php, or (9) albumid parameter to useralbums.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: photopost_php_pro
References: http://marc.info/?l=bugtraq&m=108057790723123&w=2, http://secunia.com/advisories/11241, http://securitytracker.com/id?1009571
CVE-2004-0613
osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: osticket_sts
References: http://marc.info/?l=bugtraq&m=108786779500957&w=2, http://www.securityfocus.com/bid/10586, https://exchange.xforce.ibmcloud.com/vulnerabilities/16477
CVE-2004-0807
Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mandrake_linux, suse_linux, samba, linux
References: ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873, http://marc.info/?l=bugtraq&m=109509335230495&w=2
CVE-2004-2025
SQL injection vulnerability in application_top.php for Zen Cart 1.1.3 before patch 2 may allow remote attackers to execute arbitrary SQL commands via the products_id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zen_cart
References: http://www.zen-cart.com/modules/ipb/index.php?showtopic=3731, http://www.zen-cart.com/modules/mydownloads/viewcat.php?cid=31&orderby=dateD, http://www.zen-cart.com/modules/ipb/index.php?showtopic=3731
CVE-2004-2716
Multiple SQL injection vulnerabilities in usersL.php3 in PHPMyChat 0.14.5 allow remote attackers to execute arbitrary SQL commands via the (1) sortBy, (2) sortOrder, (3) startReg, (4) U, (5) LastCheck , and (6) R parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpmychat
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html, http://secunia.com/advisories/11894, http://securitytracker.com/id?1010515
CWE: CWE-89
CVE-2004-1627
Buffer overflow in Ability Server 2.25, 2.32, 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long APPE command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ability_server
References: http://lists.virus.org/dw-0day-0412/msg00004.html, http://secunia.com/advisories/12941, http://securitytracker.com/id?1012464
CVE-2004-2012
The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: provos_systrace, netbsd, systrace_port_for_freebsd
References: ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-007.txt.asc, http://marc.info/?l=bugtraq&m=108432258920570&w=2, http://secunia.com/advisories/11585
CVE-2004-2215
RXVT-Unicode 3.4 and 3.5 does not properly close file descriptors, which allows local users to access the terminals of other users and possibly gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rxvt-unicode
References: http://cvs.schmorp.de/browse/rxvt-unicode/Changes?view=markup, http://secunia.com/advisories/12299, http://www.osvdb.org/8710
CVE-2004-2414
Novell NetWare 6.5 SP 1.1, when installing or upgrading using the Overlay CDs and performing a custom installation with OpenSSH, includes sensitive password information in the (1) NIOUTPUT.TXT and (2) NI.LOG log files, which might allow local users to obtain the passwords.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netware
References: http://secunia.com/advisories/11188, http://support.novell.com/cgi-bin/search/searchtid.cgi?/2968534.htm, http://www.securityfocus.com/bid/9934
CVE-2004-0091
NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the reg_site (or possibly regsite) parameter.  NOTE: the vendor has disputed this issue, saying "There is no hidden field called 'reg_site', nor any $reg_site variable anywhere in the vBulletin 2 or vBulletin 3 source code or templates, nor has it ever existed.  We can only assume that this vulnerability was found in a site running code modified from that supplied by Jelsoft.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vbulletin
References: http://marc.info/?l=bugtraq&m=107462349324945&w=2, http://marc.info/?l=vuln-dev&m=107462499927040&w=2, http://marc.info/?l=vuln-dev&m=107478592401619&w=2
CVE-2004-2412
Multiple SQL injection vulnerabilities in VP-ASP Shopping Cart 4.0 through 5.0 allow remote attackers to execute arbitrary SQL commands via the catalogid parameter in (1) shopreviewlist.asp and (2) shopreviewadd.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vp-asp
References: http://secunia.com/advisories/11201, http://www.securityfocus.com/bid/9967, http://www.vpasp.com/virtprog/info/faq_securityfixes.htm
CVE-2004-1767
The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
Related CWEs: CWE-264
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57479-1, http://www.kb.cert.org/vuls/id/702526, http://www.securityfocus.com/bid/9477
CWE: CWE-264
CVE-2004-2389
Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service (infinite loop) via user re-registration.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jabber_gadu-gadu_transport
References: http://secunia.com/advisories/10974/, http://securitytracker.com/id?1009248, http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429
CVE-2004-2636
TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tinyweb
References: http://secunia.com/advisories/11731, http://securitytracker.com/alerts/2004/May/1010346.html, http://www.osvdb.org/6517
CVE-2004-1933
Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ux
References: http://marc.info/?l=bugtraq&m=108180024428804&w=2, http://www.securityfocus.com/bid/10102, https://exchange.xforce.ibmcloud.com/vulnerabilities/15850
CVE-2004-0880
getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: slackware_linux, linux, getmail
References: http://marc.info/?l=bugtraq&m=109571883130372&w=2, http://security.gentoo.org/glsa/glsa-200409-32.xml, http://www.debian.org/security/2004/dsa-553
CVE-2004-1384
Multiple cross-site scripting (XSS) vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) kp3, (2) type, (3) msg, (4) forum_id, (5) pos, (6) cats_app, (7) cat_id, (8) msgball[msgnum], (9) fldball[acctnum] parameters to index.php or (10) ticket_id to viewticket_details.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpgroupware
References: http://marc.info/?l=bugtraq&m=110312656029072&w=2, http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml, http://www.gulftech.org/?node=research&article_id=00054-12142004
CVE-2004-2555
Riverdeep FoolProof Security 3.9.x on Windows 98 and Windows ME uses weak cryptography (arithmetic and XOR operations) to relate the Control password to the Administrator password, which allows local users to calculate the Administrator password if they know the Control password and password recovery key.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: foolproof_security
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0081.html, http://secunia.com/advisories/11790, http://www.osvdb.org/6735
CVE-2004-1646
Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xedus
References: http://marc.info/?l=bugtraq&m=109394018411394&w=2, http://secunia.com/advisories/12418, http://www.gulftech.org/?node=research&article_id=00047-08302004
CVE-2004-1652
phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpscheduleit
References: http://marc.info/?l=bugtraq&m=109399590602709&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17195, http://marc.info/?l=bugtraq&m=109399590602709&w=2
CVE-2004-0244
Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet.
CVSS v2.0 Score: 4.7 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:N/I:N/A:C
Affected Products: ios
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://secunia.com/advisories/10780, http://www.cisco.com/warp/public/707/cisco-sa-20040203-cat6k.shtml, http://www.kb.cert.org/vuls/id/810062
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-2705
Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pvpgn
References: http://forums.pvpgn.org/index.php/topic%2C2655.0.html, http://secunia.com/advisories/12360, http://securitytracker.com/id?1011050
CVE-2004-1135
Multiple buffer overflows in WS_FTP Server 5.03 2004.10.14 allow remote attackers to cause a denial of service (service crash) via long (1) SITE, (2) XMKD, (3) MKD, and (4) RNFR commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ws_ftp_server
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029600.html, http://marc.info/?l=bugtraq&m=110177654524819&w=2, http://www.securiteam.com/exploits/6D00L2KBPG.html
CVE-2004-0121
Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: office, outlook
Related CWEs: CWE-88
Related CAPECs: CAPEC-137, CAPEC-88, CAPEC-174
References: http://marc.info/?l=bugtraq&m=107893704602842&w=2, http://www.ciac.org/ciac/bulletins/o-096.shtml, http://www.idefense.com/application/poi/display?id=79&type=vulnerabilities
CWE: CWE-88
CVE-2004-2394
Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mandrake_linux_corporate_server, mandrake_multi_network_firewall, mandrake_linux
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060, http://www.mandriva.com/security/advisories?name=MDKSA-2004:045, http://www.securityfocus.com/bid/10370
CVE-2004-1825
Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) return or (2) mos_change_template parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mambo_open_source
References: http://marc.info/?l=bugtraq&m=107945576020593&w=2, http://secunia.com/advisories/11140, http://www.osvdb.org/4308
CVE-2004-0717
Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel, windows, opera_browser
References: http://secunia.com/advisories/11978, http://secunia.com/multiple_browsers_frame_injection_vulnerability_test/, https://exchange.xforce.ibmcloud.com/vulnerabilities/1598
CVE-2004-0390
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openserver
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0424.html, http://www.securityfocus.com/advisories/6684, https://exchange.xforce.ibmcloud.com/vulnerabilities/16113
CVE-2004-2453
Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: tutti_nova
References: http://secunia.com/advisories/12467, http://sourceforge.net/project/shownotes.php?release_id=265832, http://www.osvdb.org/9741
CVE-2004-0902
Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, thunderbird, mozilla, suse_linux, linux
References: http://bugzilla.mozilla.org/show_bug.cgi?id=226669, http://bugzilla.mozilla.org/show_bug.cgi?id=245066, http://bugzilla.mozilla.org/show_bug.cgi?id=256316
CVE-2004-0760
Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mozilla
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://bugzilla.mozilla.org/show_bug.cgi?id=250906, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-2615
The documentation for CuteNews 1.3.6 and possibly other versions specifies that files under cutenews/data must be manually given world-writable permissions, which allows local users to insert false news, delete news, and possibly gain privileges or have other unknown impact.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cutenews
References: http://archives.neohapsis.com/archives/bugtraq/2004-08/0396.html, http://securitytracker.com/id?1011099, http://www.osvdb.org/9385
CVE-2004-2036
SQL injection vulnerability in the art_print function in print.inc.php in unknown versions of jPortal before 2.3.1 allows remote attackers to inject arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jportal_web_portal
References: http://marc.info/?l=bugtraq&m=108577011129476&w=2, http://secunia.com/advisories/11737, http://securitytracker.com/id?1010327
CVE-2004-1174
direntry.c in Midnight Commander (mc) 4.5.55 and earlier allows attackers to cause a denial of service by "manipulating non-existing file handles."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, midnight_commander, debian_linux, suse_linux, linux
References: http://secunia.com/advisories/13863/, http://securitytracker.com/id?1012903, http://www.debian.org/security/2005/dsa-639
CVE-2004-0755
The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ruby
References: http://secunia.com/advisories/12290/, http://www.debian.org/security/2004/dsa-537, http://www.gentoo.org/security/en/glsa/glsa-200409-08.xml
CVE-2004-2231
Zero G Software InstallAnywhere 5.0.6, 5.0.7, and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) persistent_state or (2) env.properties.X temporary files.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: installanywhere
References: http://secunia.com/advisories/12129, http://vapid.dhs.org/zerogadv.txt, http://www.idefense.com/application/poi/display?id=82&type=vulnerabilities
CVE-2004-2236
Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: moodle
References: http://moodle.org/doc/?file=releaseold.html, http://www.osvdb.org/8090, http://moodle.org/doc/?file=releaseold.html
CVE-2004-1881
SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cactushop
References: http://marc.info/?l=bugtraq&m=108075059013762&w=2, http://secunia.com/advisories/11272, http://securitytracker.com/id?1009601
CVE-2004-1720
The (1) address.html and possibly (2) calendar.html pages in Merak Mail Server 5.2.7 allow remote attackers to gain sensitive information via an invalid HTTP request, which reveals the installation path. NOTE: it is unclear whether the calendar.html is an exposure, since the path is leaked in web logs that may only be available to the administrators, who would have access to the path through legitimate means.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mail_server
References: http://marc.info/?l=bugtraq&m=109279057326044&w=2, http://packetstormsecurity.nl/0408-exploits/merak527.txt, http://secunia.com/advisories/12269
CVE-2004-2486
The DSS verification code in Dropbear SSH Server before 0.43 frees uninitialized variables, which might allow remote attackers to gain access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dropbear_ssh
References: http://matt.ucc.asn.au/dropbear/CHANGES, http://secunia.com/advisories/12153, http://secunia.com/advisories/28935
CVE-2004-2066
SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linpha
References: http://marc.info/?l=bugtraq&m=109112246805277&w=2, http://secunia.com/advisories/12189, http://www.osvdb.org/8272
CVE-2004-1902
The Citrix MetaFrame Password Manager 2.0, when a central credential store is not configured, does not encrypt passwords entered immediately after executing the First Time User Wizards, which allows local users to gain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: metaframe_password_manager
References: http://marc.info/?l=bugtraq&m=108127948610311&w=2, http://secunia.com/advisories/11293, http://securitytracker.com/id?1009659
CVE-2004-0726
The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000
References: http://marc.info/?l=bugtraq&m=108965512912175&w=2, http://www.securityfocus.com/bid/10693, https://exchange.xforce.ibmcloud.com/vulnerabilities/16704
CVE-2004-0550
Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: realplayer
References: http://www.idefense.com/application/poi/display?id=109&type=vulnerabilities&flashstatus=false, https://exchange.xforce.ibmcloud.com/vulnerabilities/16388, http://www.idefense.com/application/poi/display?id=109&type=vulnerabilities&flashstatus=false
CVE-2004-1002
Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ppp, ubuntu_linux
Related CWEs: CWE-191
References: http://www.securityfocus.com/archive/1/379450, https://exchange.xforce.ibmcloud.com/vulnerabilities/17874, https://www.ubuntu.com/usn/usn-12-1/
CWE: CWE-191
CVE-2004-0265
Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=107634727520936&w=2, http://www.securityfocus.com/bid/9605, http://www.securityfocus.com/bid/9613
CVE-2004-0834
Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_multi_network_firewall, mandrake_linux, mandrake_linux_corporate_server, linux, speedtouch_usb_driver
References: http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734, http://speedtouch.sourceforge.net/index.php?/news.en.html, http://www.mail-archive.com/speedtouch%40ml.free.fr/msg06688.html
CVE-2004-2501
Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (1) a long command string or (2) a long string to the MEIMAP service and then terminating the connection.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailenable_enterprise, mailenable_professional
References: http://archives.neohapsis.com/archives/bugtraq/2004-11/0349.html, http://secunia.com/advisories/13318, http://securitytracker.com/id?1012327
CVE-2004-1340
Debian GNU/Linux 3.0 installs the libpam-radius-auth package with the pam_radius_auth.conf set to be world-readable, which allows local users to obtain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: debian_linux
References: http://secunia.com/advisories/14046, http://securitytracker.com/id?1013030, http://www.debian.org/security/2005/dsa-659
CVE-2004-1577
index.php in PHP Links allows remote attackers to gain sensitive information via an invalid show parameter, which reveals the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phplinks
References: http://marc.info/?l=bugtraq&m=109693280416747&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17588, http://marc.info/?l=bugtraq&m=109693280416747&w=2
CVE-2004-1081
The Application Framework (AppKit) for Apple Mac OS X 10.2.8 and 10.3.6 does not properly restrict access to a secure text input field, which allows local users to read keyboard input from other applications within the same window session.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: quicktime_streaming_server, darwin_streaming_server, mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://secunia.com/advisories/13362/, http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE-2004-0364
The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: norton_internet_security
References: http://marc.info/?l=bugtraq&m=107970885922442&w=2, http://marc.info/?l=bugtraq&m=107980262324362&w=2, http://secunia.com/advisories/11168
CVE-2004-2526
Directory traversal vulnerability in ldacgi.exe in IBM Tivoli Directory Server 4.1 and earlier allows remote attackers to view arbitrary files via a .. (dot dot) in the Template parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tivoli_directory_server
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1311.html, http://secunia.com/advisories/10347, http://securitytracker.com/id?1010834
CVE-2004-1131
Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.13/SCOSA-2005.13.txt, http://www.securityfocus.com/bid/12474, https://exchange.xforce.ibmcloud.com/vulnerabilities/19243
CVE-2004-1083
Apache for Apple Mac OS X 10.2.8 and 10.3.6 restricts access to files in a case sensitive manner, but the Apple HFS+ filesystem accesses files in a case insensitive manner, which allows remote attackers to read .DS_Store files and files beginning with ".ht" using alternate capitalization.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: quicktime_streaming_server, darwin_streaming_server, mac_os_x_server, mac_os_x
Related CWEs: CWE-178
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
CWE: CWE-178
CVE-2004-1659
Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cutenews
References: http://marc.info/?l=bugtraq&m=109415338521881&w=2, http://secunia.com/advisories/12432, http://www.securityfocus.com/bid/11097
CVE-2004-1013
The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux, cyrus_imap_server, linux, openpkg, fedora_core
References: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143, http://asg.web.cmu.edu/cyrus/download/imapd/changes.html, http://marc.info/?l=bugtraq&m=110123023521619&w=2
CVE-2004-1888
display.cgi in Aborior Encore WebForum allows remote to execute arbitrary commands via shell metacharacters in the file variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: encore_web_forum
References: http://marc.info/?l=bugtraq&m=108100973820868&w=2, http://www.osvdb.org/16831, http://www.securityfocus.com/archive/1/437813/100/0/threaded
CVE-2004-1190
SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: suse_linux
References: http://secunia.com/advisories/18510, http://www.novell.com/linux/security/advisories/2004_42_kernel.html, http://www.redhat.com/support/errata/RHSA-2006-0101.html
CVE-2004-1347
X Display Manager (XDM) on Solaris 8 allows remote attackers to cause a denial of service (XDM crash) via an invalid X Display Manager Control Protocol (XDMCP) request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://secunia.com/advisories/12257/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101549-1, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57619-1&searchclause=security
CVE-2004-0761
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: thunderbird, mozilla, firefox
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://bugzilla.mozilla.org/show_bug.cgi?id=240053, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-2393
Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jsse
References: http://secunia.com/advisories/11639, http://securitytracker.com/id?1010193, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57560-1
CVE-2004-2694
Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top".
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Products: outlook_express
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=108448627120764&w=2, http://secunia.com/advisories/11607, http://www.osvdb.org/6121
CWE: CWE-264
CVE-2004-0698
4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: webstar
References: ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt, http://www.atstake.com/research/advisories/2004/a071304-1.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/16689
CVE-2004-2255
Directory traversal vulnerability in phpMyFAQ 1.3.12 allows remote attackers to read arbitrary files, and possibly execute local PHP files, via the action variable, which is used as part of a template filename.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: phpmyfaq
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html, http://secunia.com/advisories/11640, http://securitytracker.com/id?1010190
CVE-2004-1746
Cross-site scripting (XSS) vulnerability in index.php in PHP Code Snippet Library allows remote attackers to inject arbitrary web script or HTML via the (1) cat_select or (2) show parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php_code_snippet_library
References: http://marc.info/?l=bugtraq&m=109340580218818&w=2, http://nikyt0x.webcindario.com/0001.txt, http://secunia.com/advisories/12370
CVE-2004-2680
mod_python (libapache2-mod-python) 3.1.4 and earlier does not properly handle when output filters process more than 16384 bytes, which can cause filter.read to return portions of previously freed memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mod_python
References: http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3c6DCA8C14-8FFA-11D8-8B4E-000A95B0D772%40pixar.com%3e, http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cCD485B27-8F3E-11D8-934B-000A95B0D772%40pixar.com%3e, http://mail-archives.apache.org/mod_mbox/httpd-python-dev/200404.mbox/%3cEB279100-9000-11D8-8B4E-000A95B0D772%40pixar.com%3e
CVE-2004-0819
The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service (crash) via an ICMP echo (ping) packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://marc.info/?l=bugtraq&m=109345131508824&w=2, http://openbsd.org/errata34.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/17129
CVE-2004-1712
Cross-site scripting (XSS) vulnerability in TypePad allows remote attackers to inject arbitrary Javascript via the name parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: typepad
References: http://marc.info/?l=bugtraq&m=109189453302959&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/19664, http://marc.info/?l=bugtraq&m=109189453302959&w=2
CVE-2004-0243
AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aix
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0313.html, http://marc.info/?l=bugtraq&m=107583269206044&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/15172
CWE: CWE-203