DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1922
Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of service (memory consumption) via a small BMP file with has a large memory size.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=108183130827872&w=2, http://marc.info/?l=bugtraq&m=108183130827872&w=2
CVE-2004-0689
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.
CVSS v3.1 Score: 7.1 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, kde
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864, http://marc.info/?l=bugtraq&m=109225538901170&w=2, http://secunia.com/advisories/12276/
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2004-0905
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, suse_linux, mozilla, linux, firefox
References: http://bugzilla.mozilla.org/show_bug.cgi?id=250862, http://marc.info/?l=bugtraq&m=109698896104418&w=2, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-0400
Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: exim
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html, http://www.debian.org/security/2004/dsa-501, http://www.debian.org/security/2004/dsa-502
CVE-2004-0206
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, windows_xp, windows_98, windows_2003_server
References: http://marc.info/?l=bugtraq&m=109786703930674&w=2, http://secunia.com/advisories/12803/, http://www.kb.cert.org/vuls/id/640488
CVE-2004-0785
Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2) a long hostname for the local system as obtained from DNS, or (3) a long URL that is not properly handled by the URL decoder.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim
References: http://gaim.sourceforge.net/security/?id=3, http://gaim.sourceforge.net/security/?id=4, http://gaim.sourceforge.net/security/?id=5
CVE-2004-1733
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via .. (dot dot) sequences in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mydms
References: http://marc.info/?l=bugtraq&m=109314495007280&w=2, http://secunia.com/advisories/12340, http://www.securityfocus.com/bid/10996
CVE-2004-2121
Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "\..") sequences, in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_server_for_corel_paradox
References: http://marc.info/?l=bugtraq&m=107497413413907&w=2, http://securitytracker.com/id?1008840, http://www.securityfocus.com/bid/9486
CVE-2004-1773
Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via (1) long output from wc to shar, or (2) unknown vectors in unshar.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sharutils
References: http://security.gentoo.org/glsa/glsa-200410-01.xml, http://www.redhat.com/support/errata/RHSA-2005-377.html, http://www.securityfocus.com/bid/11298
CVE-2004-2684
Unspecified vulnerability in the %template package in InterSystems Cache' 5.0 allows attackers to access certain files on a server, including (1) cache.key and (2) cache.dat, related to .csp files under (a) Dev\studio\templates and (b) Devuser\studio\templates.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cache_database
References: http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/7af3237a57e97f14/da52318590c68c75, http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/cda052864061faf7/b1c4ad61ca27c514, http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/7af3237a57e97f14/da52318590c68c75
CVE-2004-1275
Buffer overflow in the remove_quote function in convert.c for html2hdml 1.0.3 allows remote attackers to execute arbitrary code via a crafted HTML file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: html2hdml
References: http://tigger.uic.edu/~jlongs2/holes/html2hdml.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18556, http://tigger.uic.edu/~jlongs2/holes/html2hdml.txt
CVE-2004-1292
Buffer overflow in the parse_emelody function in parse_emelody.c for ringtonetools 2.22 allows remote attackers to execute arbitrary code via a crafted eMelody file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ringtonetools
References: http://tigger.uic.edu/~jlongs2/holes/ringtonetools.txt, http://www.gentoo.org/security/en/glsa/glsa-200503-18.xml, https://exchange.xforce.ibmcloud.com/vulnerabilities/18557
CVE-2004-2099
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: need_for_speed_hot_pursuit_2
References: http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt, http://marc.info/?l=bugtraq&m=107479094508691&w=2, http://www.securityfocus.com/bid/9473
CVE-2004-2430
Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: officescan
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0117.html, http://secunia.com/advisories/11806, http://uk.trendmicro-europe.com/enterprise/support/knowledge_base_detail.php?solutionId=20118
CVE-2004-2402
Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded to parameter.  NOTE: some sources say that the board parameter is affected, but this is incorrect.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: yabb
References: http://archives.neohapsis.com/archives/bugtraq/2004-09/0227.html, http://secunia.com/advisories/12593, http://www.osvdb.org/10242
CVE-2004-1597
RIM Blackberry 7230 running RIM Blackberry OS 3.7 SP1 allows remote attackers to cause a denial of service (device reboot and possibly data corruption) via a calendar message with a long Location field, which triggers a watchdog while the message is being stored.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: blackberry
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027487.html, http://marc.info/?l=bugtraq&m=109769022430842&w=2, http://marc.info/?l=bugtraq&m=109778267829493&w=2
CVE-2004-0739
Buffer overflow in Whisper FTP Surfer 1.0.7 allows remote FTP servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long filename.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: whisper_ftp_surfer
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/024087.html, http://marc.info/?l=bugtraq&m=109035224715409&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16742
CVE-2004-2133
Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories such as /usr/src/packages.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cvsup
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0025.html, http://marc.info/?l=bugtraq&m=107539776002450&w=2, http://www.securityfocus.com/bid/9523
CVE-2004-2560
DokuWiki before 2004-10-19, when used on a web server that permits execution based on file extension, allows remote attackers to execute arbitrary code by uploading a file with an appropriate extension such as ".php" or ".cgi".
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dokuwiki
References: http://wiki.splitbrain.org/wiki:old_changes, http://www.osvdb.org/11084, http://www.securityfocus.com/bid/11486
CVE-2004-0073
PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edp_relative_path parameter to reference a URL on a remote web server that contains a malicious serverdata.php script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: easydynamicpages
References: http://marc.info/?l=bugtraq&m=107307457327707&w=2, http://secunia.com/advisories/10535, http://securitytracker.com/id?1008584
CVE-2004-0189
The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: squid
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt, ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000838
CVE-2004-2130
Multiple cross-site scripting (XSS) vulnerabilities in privmsg.php in phpBB 2.0.6 allow remote attackers to execute arbitrary script or HTML via the (1) folder or (2) mode variables.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=107530946123822&w=2, http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=161943, http://www.securityfocus.com/bid/9290
CVE-2004-2625
Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HTML via Javascript in an attribute of an IMG tag.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: outblaze_email
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0733.html, http://secunia.com/advisories/12084, http://securitytracker.com/alerts/2004/Jul/1010735.html
CVE-2004-1261
Multiple buffer overflows in the preparse function in asp2php 0.76.23 allow remote attackers to execute arbitrary code via crafted ASP scripts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: asp2php
References: http://tigger.uic.edu/~jlongs2/holes/asp2php.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18585, http://tigger.uic.edu/~jlongs2/holes/asp2php.txt
CVE-2004-2621
Nortel Contivity VPN Client 2.1.7, 3.00, 3.01, 4.91, and 5.01, when opening a VPN tunnel, does not check the gateway certificate until after a dialog box has been displayed to the user, which creates a race condition that allows remote attackers to perform a man-in-the-middle (MITM) attack.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Affected Products: contivity
References: http://secunia.com/advisories/12881, http://securitytracker.com/id?1011846, http://www.osvdb.org/11002
CVE-2004-1842
Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.
CVSS v3.1 Score: 8.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
Related CWEs: CWE-352
Related CAPECs: CAPEC-467, CAPEC-111, CAPEC-462
References: http://marc.info/?l=bugtraq&m=108006309112075&w=2, http://secunia.com/advisories/11195, http://www.securityfocus.com/bid/9895
CWE: CWE-352
CVE-2004-2392
libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mandrake_linux_corporate_server, mandrake_linux
References: http://securitytracker.com/id?1010187, http://www.mandriva.com/security/advisories?name=MDKSA-2004:044, http://www.redhat.com/support/errata/RHSA-2005-770.html
CVE-2004-0099
mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:01.mksnap_ffs.asc, http://www.osvdb.org/3790, http://www.securityfocus.com/bid/9533
CVE-2004-0031
PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgedview
References: http://marc.info/?l=bugtraq&m=107340840209453&w=2, http://secunia.com/advisories/10565, http://www.osvdb.org/3403
CVE-2004-1809
Cross-site scripting (XSS) vulnerability in phpBB 2.0.6d and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) postdays parameter to viewtopic.php or (2) topicdays parameter to viewforum.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=107920498205324&w=2, http://secunia.com/advisories/11121, http://www.osvdb.org/4257
CVE-2004-1929
SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108180111826852&w=2, http://secunia.com/advisories/11347, http://www.securityfocus.com/bid/10135
CVE-2004-1036
Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: squirrelmail, linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000905, http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html
CVE-2004-2009
NukeJokes 1.7 and 2 Beta allows remote attackers to obtain the full path of the server via (1) a direct call to mainfunctions.php, (2) an invalid jokeid parameter in a JokeView function or (3) an invalid cat parameter in a CatView function, which reveals the path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nukejokes
References: http://marc.info/?l=bugtraq&m=108404714232579&w=2, http://www.waraxe.us/index.php?modname=sa&id=28, https://exchange.xforce.ibmcloud.com/vulnerabilities/16094
CVE-2004-2660
Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.10 allows local users to cause a denial of service (memory consumption) via certain O_DIRECT (direct IO) write requests.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Affected Products: linux_kernel
References: http://linux.bkbits.net:8080/linux-2.6/cset%404182a613oVsK0-8eCWpyYFrUf8rhLA, http://secunia.com/advisories/21605, http://secunia.com/advisories/22093
CVE-2004-1518
SQL injection vulnerability in follow.php in Phorum 5.0.12 and earlier allows remote authenticated users to execute arbitrary SQL command via the forum_id parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phorum
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028609.html, http://marc.info/?l=bugtraq&m=110021385926870&w=2, http://secunia.com/advisories/13174
CVE-2004-0233
Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: slackware_linux, propack, utempter
References: http://security.gentoo.org/glsa/glsa-200405-05.xml, http://sunsolve.sun.com/search/document.do?assetkey=1-77-1000752.1-1, http://www.mandriva.com/security/advisories?name=MDKSA-2004:031
CVE-2004-1963
nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to obtain sensitive information via a string in the portNum parameter, which reveals the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: network_query_tool
References: http://marc.info/?l=bugtraq&m=108276405108267&w=2, http://secunia.com/advisories/11479, http://www.waraxe.us/index.php?modname=sa&id=24
CVE-2004-0533
Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: webintelligence, infoview
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0056.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026549.html, http://secunia.com/advisories/12587/
CVE-2004-2640
Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linuxstat
References: http://secunia.com/advisories/12963, http://securitytracker.com/id?1011920, http://sourceforge.net/project/shownotes.php?release_id=277371
CVE-2004-0850
Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: star_tape_archiver
References: http://securitytracker.com/id?1011195, http://www.gentoo.org/security/en/glsa/glsa-200409-11.xml, http://www.kb.cert.org/vuls/id/339089
CVE-2004-2503
INweb Mail Server 2.40 allows remote attackers to cause a denial of service (crash) via a large number of connect/disconnect actions to the (1) POP3 and (2) SMTP services.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mail_server
References: http://members.lycos.co.uk/r34ct/main/inwebmail.txt, http://secunia.com/advisories/12056, http://securitytracker.com/id?1010680
CVE-2004-2749
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter.  NOTE: this issue was reported as XSS, but this might be a terminology error.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: homeportal
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://archives.neohapsis.com/archives/bugtraq/2004-01/0179.html, http://secunia.com/advisories/10666, http://securitytracker.com/id?1008798
CWE: CWE-22
CVE-2004-0825
QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application deadlock) via a certain sequence of operations.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mac_os_x_server
References: http://marc.info/?l=bugtraq&m=109467471617466&w=2, http://secunia.com/advisories/12491, http://securitytracker.com/id?1011176
CVE-2004-0430
Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/mhonarc/security-announce/msg00049.html, http://secunia.com/advisories/11539, http://securitytracker.com/id?1010039
CVE-2004-1938
SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phorum
References: http://marc.info/?l=bugtraq&m=108239796512897&w=2, http://secunia.com/advisories/11407, http://www.securityfocus.com/bid/10173
CVE-2004-0253
IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cloudscape
References: http://marc.info/?l=bugtraq&m=107604065819233&w=2, http://www.securityfocus.com/bid/9583, https://exchange.xforce.ibmcloud.com/vulnerabilities/15067
CVE-2004-1908
McFreeScan.CoMcFreeScan.1 ActiveX object in Mcafee FreeScan allows remote attackers to obtain sensitive information via the GetSpecialFolderLocation function with certain parameters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: freescan
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019877.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html, http://marc.info/?l=bugtraq&m=108136872711898&w=2
CVE-2004-2637
The NAT implementation in Zonet ZSR1104WE Wireless Router Runtime Code Version 2.41 converts IP addresses of inbound connections to the IP address of the router, which allows remote attackers to bypass intended security restrictions.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: zsr1104we_wireless_router_runtime_code
References: http://marc.info/?l=full-disclosure&m=108324905314026&w=2, http://secunia.com/advisories/11499, http://securitytracker.com/id?1009967
CVE-2004-0479
Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ie
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021500.html, http://marc.info/?l=vuln-dev&m=108457938412310&w=2, http://marc.info/?l=vuln-dev&m=108476938219070&w=2
CVE-2004-0349
Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gweb_http_server
References: http://marc.info/?l=bugtraq&m=107833161617397&w=2, http://www.securityfocus.com/bid/9742, https://exchange.xforce.ibmcloud.com/vulnerabilities/15381
CVE-2004-1760
The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not require authentication, which allows remote attackers to gain administrator privileges by connecting to TCP port 14247.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: personal_assistant, x345, conference_connection, ip_call_center_express_enhanced, mcs-7835i-2.4
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://secunia.com/advisories/10696, http://www.ciac.org/ciac/bulletins/o-066.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2004-0467
Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: junos
References: http://secunia.com/advisories/14049, http://securitytracker.com/id?1013039, http://www.kb.cert.org/vuls/id/409555
CVE-2004-0560
Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted content of a certain size that triggers the overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gopherd
References: http://secunia.com/advisories/13855, http://www.debian.org/security/2004/dsa-638, http://secunia.com/advisories/13855
CVE-2004-1732
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mydms
References: http://marc.info/?l=bugtraq&m=109314495007280&w=2, http://secunia.com/advisories/12340, http://www.securityfocus.com/bid/10996
CVE-2004-2764
Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain privileges and read data from other applets via unspecified vectors related to classes in the XSLT processor, aka "XML sniffing."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jre, sdk
Related CWEs: CWE-264
References: http://archive.cert.uni-stuttgart.de/uniras/2004/08/msg00007.html, http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d, http://groups.google.com/group/comp.security.unix/tree/browse_frm/month/2004-10/fe63f1daa9689d50?rnum=161&_done=%2Fgroup%2Fcomp.security.unix%2Fbrowse_frm%2Fmonth%2F2004-10%3Ffwc%3D1%26#doc_29036353582c690d
CWE: CWE-264
CVE-2004-0450
Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: log2mail
References: http://felinemenace.org/~jaguar/advisories/log2mail.txt, http://osvdb.org/6711, http://secunia.com/advisories/11768
CVE-2004-1354
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sunos, solaris
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://secunia.com/advisories/11616/, http://spoofed.org/files/text/solaris-smc-advisory.txt, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57559-1&searchclause=%22category:security%22%20%20111313-02
CWE: CWE-22
CVE-2004-2740
PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows remote attackers to include arbitrary PHP code via a URL in the path_pre parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phprojekt
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://secunia.com/advisories/13660, http://securitytracker.com/id?1012708, http://www.gentoo.org/security/en/glsa/glsa-200412-27.xml
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2004-1895
YaST Online Update (YOU) in SuSE 8.2 and 9.0 allows local users to overwrite arbitrary files via a symlink attack on you-$USER/cookies.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: suse_linux
References: http://archives.neohapsis.com/archives/bugtraq/2004-04/0058.html, http://marc.info/?l=bugtraq&m=108118395519164&w=2, http://secunia.com/advisories/11300
CVE-2004-1836
SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to execute arbitrary SQL via the id parameter of the comments action.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: invision_power_top_site_list
References: http://marc.info/?l=bugtraq&m=107997924117652&w=2, http://secunia.com/advisories/11187, http://securitytracker.com/id?1009511
CVE-2004-2292
Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attackers to cause a denial of service (application crash) via a long STATUS command to the IMAP server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mdaemon
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0527.html, http://www.securityfocus.com/bid/10366, https://exchange.xforce.ibmcloud.com/vulnerabilities/16118
CVE-2004-1192
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ux
References: http://marc.info/?l=bugtraq&m=110295469430696&w=2, http://marc.info/?l=bugtraq&m=110304986223400&w=2, http://www.nosystem.com.ar/advisories/advisory-09.txt
CVE-2004-0060
WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash) via a large POST request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: www_file_share_pro
References: http://marc.info/?l=bugtraq&m=107411794303201&w=2, http://www.securitytracker.com/id?1008779, http://marc.info/?l=bugtraq&m=107411794303201&w=2
CVE-2004-1493
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (server crash) via multiple connections with long nicknames, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: master_of_orion_iii
References: http://marc.info/?l=bugtraq&m=109889705116038&w=2, http://packetstormsecurity.nl/0410-advisories/masterOrionIII.txt, http://secunia.com/advisories/13008
CVE-2004-2497
Cross-site scripting (XSS) vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: web_page_generator, web_page_generator_enterprise
References: http://secunia.com/advisories/12150, http://www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html, http://www.osvdb.org/8264
CVE-2004-1954
Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phprofession
References: http://marc.info/?l=bugtraq&m=108258931430060&w=2, http://secunia.com/advisories/11465, http://www.osvdb.org/5624
CVE-2004-2148
Unknown local vulnerability in the "change user" feature of Slava Astashonok Fprobe 1.0.5 and earlier has unknown impact and attack vectors.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: fprobe
References: http://secunia.com/advisories/12648/, http://securitytracker.com/id?1011417, http://sourceforge.net/project/shownotes.php?release_id=269807
CVE-2004-2150
Nettica Corporation INTELLIPEER Email Server 1.01 displays different error messages for valid and invalid account names, which allows remote attackers to determine valid account names.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: intellipeer_email_server
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://secunia.com/advisories/12661/, http://securitytracker.com/id?1011425, http://www.osvdb.org/10349
CWE: CWE-203
CVE-2004-1019
The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux, ubuntu_linux, openpkg, php
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html, http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html, http://marc.info/?l=bugtraq&m=110314318531298&w=2
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-0644
The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kerberos_5
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860, http://marc.info/?l=bugtraq&m=109508872524753&w=2, http://rhn.redhat.com/errata/RHSA-2004-350.html
CVE-2004-0808
The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: samba
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873, http://marc.info/?l=bugtraq&m=109509335230495&w=2, http://marc.info/?l=bugtraq&m=109526231623307&w=2
CVE-2004-1979
Cross-site scripting (XSS) vulnerability in do_search.php in PROPS 0.6.1 allows remote attackers to inject arbitrary HTML or web script via the search_string parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: props
References: http://marc.info/?l=bugtraq&m=108342671616155&w=2, http://sourceforge.net/project/shownotes.php?group_id=29581&release_id=234433, http://www.securityfocus.com/bid/10258
CVE-2004-1579
index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid cat_id parameter, which reveals the full path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cubecart
References: http://marc.info/?l=bugtraq&m=109713382400457&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17630, http://marc.info/?l=bugtraq&m=109713382400457&w=2
CVE-2004-2517
myServer 0.7.1 allows remote attackers to cause a denial of service (crash) via a long HTTP POST request in a View=Logon operation to index.html.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: myserver
References: http://fux0r.phathookups.com/advisory/sp-x14-advisory.txt, http://secunia.com/advisories/12640, http://securitytracker.com/id?1011427
CVE-2004-1088
Postfix server for Apple Mac OS X 10.3.6, when using CRAM-MD5, allows remote attackers to send mail without authentication by replaying authentication information.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quicktime_streaming_server, darwin_streaming_server, mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://secunia.com/advisories/13362/, http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE-2004-1154
Integer overflow in the Samba daemon (smbd) in Samba 2.x and 3.0.x through 3.0.9 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a Samba request with a large number of security descriptors that triggers a heap-based buffer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, samba, secure_linux, fedora_core
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt, http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html, http://secunia.com/advisories/13453/
CVE-2004-1874
Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: a-cart
References: http://marc.info/?l=bugtraq&m=108057887008983&w=2, http://secunia.com/advisories/11236, http://www.securityfocus.com/bid/9997
CVE-2004-0086
Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html, http://www.securityfocus.com/bid/9504, http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html
CVE-2004-1724
The ReadMe First.txt file in PHP-Fusion 4.0 instructs users to set the permissions on the fusion_admin/db_backups directory to world read/write/execute (777), which allows remote attackers to download or view database backups, which have easily guessable filenames and contain the administrator username and password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php_fusion
References: http://marc.info/?l=bugtraq&m=109285292901685&w=2, http://secunia.com/advisories/12336, http://www.securityfocus.com/bid/10974
CVE-2004-0286
Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long username.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: robotftp_server
References: http://marc.info/?l=bugtraq&m=107696194306878&w=2, http://www.securityfocus.com/bid/9672, https://exchange.xforce.ibmcloud.com/vulnerabilities/15225
CVE-2004-2626
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized SMS messages by overlaying a confirmation message with a malicious message.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: s55
References: http://marc.info/?l=full-disclosure&m=108308895624565&w=2, http://marc.info/?l=full-disclosure&m=108325033624812&w=2, http://secunia.com/advisories/11492
CVE-2004-1517
Zone Labs IMsecure and IMsecure Pro before 1.5 allow remote attackers to bypass Active Link Filtering via an instant message containing a URL with hex encoded file extensions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imsecure
References: http://download.zonelabs.com/bin/free/securityAlert/16.html, http://marc.info/?l=bugtraq&m=110020607924001&w=2, http://secunia.com/advisories/13169
CVE-2004-2492
Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web (GmaxWWW) Desktop 5, 6, and Desktop for Jichitai 6, allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: groupmax_world_wide_web_desktop
References: http://secunia.com/advisories/13321, http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html, http://www.osvdb.org/12154
CVE-2004-1564
CRLF injection vulnerability in subscribe_thread.php in w-Agora 4.1.6a allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the thread parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: w-agora
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html, http://marc.info/?l=bugtraq&m=109655691512298&w=2, http://secunia.com/advisories/12695
CVE-2004-0777
Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: courier-imap
Related CWEs: CWE-134
Related CAPECs: CAPEC-135, CAPEC-67
References: http://security.gentoo.org/glsa/glsa-200408-19.xml, http://www.securityfocus.com/bid/10976, http://www.trustix.net/errata/2004/0043/
CWE: CWE-134
CVE-2004-1342
CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cvs
References: http://www.debian.org/security/2005/dsa-715, http://www.debian.org/security/2005/dsa-715
CVE-2004-1225
SQL injection vulnerability in SugarCRM Sugar Sales before 2.0.1a allows remote attackers to execute arbitrary SQL commands and gain privileges via the record parameter in a DetailView action to index.php, and record parameters in other functionality.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sugarcrm
References: http://marc.info/?l=bugtraq&m=110295433323795&w=2, http://www.gulftech.org/?node=research&article_id=00053-120104, http://www.securityfocus.com/bid/11740
CVE-2004-1660
PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to (1) show_archives.php or (2) show_news.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cutenews
References: http://seclists.org/lists/bugtraq/2004/Sep/0014.html, http://secunia.com/advisories/12432, http://www.7a69ezine.org/node/view/130
CVE-2004-2688
Cross-site scripting (XSS) vulnerability in index.php in NewsPHP allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.  NOTE: this issue might overlap vector 3 in CVE-2006-3358.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: newsphp
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html, http://secunia.com/advisories/11346, http://securitytracker.com/alerts/2004/Apr/1009740.html
CWE: CWE-79
CVE-2004-1184
The EPSF pipe support in enscript 1.6.3 allows remote attackers or local users to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enscript, propack, suse_linux, fedora_core
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html, http://secunia.com/advisories/35074, http://securitytracker.com/id?1012965
CVE-2004-1351
Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57659-1&searchclause=%22category:security%22%20%22availability%2C%20security%22, http://www.auscert.org.au/render.html?it=4597, http://www.ciac.org/ciac/bulletins/p-050.shtml
CVE-2004-2482
Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: outlook
References: http://secunia.com/advisories/12041, http://www.osvdb.org/7769, http://www.securityfocus.com/archive/1/368492
CVE-2004-2047
Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbitrary files via a .. (dot dot) in the pathext parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: easyweb_filemanager
References: http://marc.info/?l=bugtraq&m=109068482605241&w=2, http://secunia.com/advisories/12151, http://www.cirt.net/advisories/ew_file_manager.shtml