DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1232
Stack-based buffer overflow in the code that sends images in Gadu-Gadu allows remote attackers to execute arbitrary code via a large image filename.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=110295777306493&w=2, http://www.man.poznan.pl/~security/gg-adv.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18462
CVE-2004-0423
The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ssmtp
References: http://marc.info/?l=bugtraq&m=108239608131119&w=2, http://marc.info/?l=bugtraq&m=108239608131119&w=2
CVE-2004-0088
The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerability than CVE-2004-0087.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html, http://www.osvdb.org/6820, http://www.securityfocus.com/bid/9504
CVE-2004-1538
SQL injection vulnerability in include.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpkit
References: http://marc.info/?l=bugtraq&m=110117116115493&w=2, http://secunia.com/advisories/13262, http://www.securityfocus.com/bid/11725
CVE-2004-1234
load_elf_binary in Linux before 2.4.26 allows local users to cause a denial of service (system crash) via an ELF binary in which the interpreter is NULL.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=142965, http://linux.bkbits.net:8080/linux-2.4/cset%404076466d_SqUm4azg4_v3FIG2-X6XQ, http://secunia.com/advisories/20162
CVE-2004-0957
Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, suse_linux, secure_linux, mysql, openpkg
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000947, http://www.ciac.org/ciac/bulletins/p-018.shtml, http://www.debian.org/security/2005/dsa-707
CVE-2004-1553
SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp.  NOTE: it was later reported that vector 1 affects aspWebAlbum 3.2, and the vector involves the txtUserName parameter in a processlogin action to album.asp, as reachable from the login action.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aspwebalbum
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://marc.info/?l=bugtraq&m=109604910025090&w=2, http://osvdb.org/47913, http://osvdb.org/47914
CWE: CWE-89
CVE-2004-2193
Cross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) tms[0] or (2) url parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cjoverkill
References: http://bbs.icefire.org/viewtopic.php?t=573, http://secunia.com/advisories/12786, http://securitytracker.com/id?1011604
CVE-2004-1546
Multiple buffer overflows in MDaemon 6.5.1 allow remote attackers to cause a denial of service (application crash) via a long (1) SAML, SOML, SEND, or MAIL command to the SMTP server or (2) LIST command to the IMAP server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mdaemon
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026770.html, http://marc.info/?l=bugtraq&m=109591179510781&w=2, http://www.osvdb.org/10223
CVE-2004-2035
MiniShare 1.3.2 allows remote attackers to cause a denial of service (crash) via a malformed HTTP GET or HEAD request without the proper number of trailing CRLF sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: minimal_http_server
References: http://lists.netsys.com/pipermail/full-disclosure/2004-May/021980.html, http://marc.info/?l=bugtraq&m=108563992129877&w=2, http://secunia.com/advisories/11715
CVE-2004-0272
SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: maxwebportal
References: http://marc.info/?l=bugtraq&m=107643014606515&w=2, http://www.securityfocus.com/bid/9625, https://exchange.xforce.ibmcloud.com/vulnerabilities/15121
CVE-2004-1759
Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, allows remote attackers to cause a denial of service (CPU consumption) via arbitrary packets to TCP port 14247, as demonstrated using port scanning.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: personal_assistant, x345, conference_connection, ip_call_center_express_enhanced, mcs-7835i-2.4
Related CWEs: CWE-399
References: http://secunia.com/advisories/10696, http://www.ciac.org/ciac/bulletins/o-066.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20040121-voice.shtml
CWE: CWE-399
CVE-2004-1415
SQL injection vulnerability in (1) disp_album.php and possibly (2) disp_img.php in 2Bgal 2.4 and 2.5.1 allows remote attackers to execute arbitrary SQL commands via the id_album parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: 2bgal
References: http://marc.info/?l=bugtraq&m=110375900916558&w=2, http://secunia.com/advisories/13620, http://www.securityfocus.com/bid/12083
CVE-2004-2559
DokuWiki before 2004-10-19 allows remote attackers to access administrative functionality including (1) Mediaselectiondialog, (2) Recent changes, (3) feed, and (4) search, possibly due to the lack of ACL checks.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dokuwiki
References: http://securitytracker.com/id?1011802, http://wiki.splitbrain.org/wiki:old_changes, http://www.osvdb.org/11005
CVE-2004-1266
Buffer overflow in the get_field_headers function in csv2xml.cpp for csv2xml 0.5.1 allows remote attackers to execute arbitrary code via a crafted CSV file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: csv2xml
References: http://tigger.uic.edu/~jlongs2/holes/csv2xml.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18602, http://tigger.uic.edu/~jlongs2/holes/csv2xml.txt
CVE-2004-0011
Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fsp
References: http://www.ciac.org/ciac/bulletins/o-048.shtml, http://www.debian.org/security/2004/dsa-416, http://www.securityfocus.com/bid/9377
CVE-2004-1649
Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfo_file command line parameter.  NOTE: this issue might not cross security boundaries, so it may be REJECTED in the future.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025902.html, http://marc.info/?l=bugtraq&m=109413415205017&w=2, http://marc.info/?l=full-disclosure&m=109391133831787&w=2
CVE-2004-0037
FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: opentext_firstclass_desktop_client
References: http://marc.info/?l=bugtraq&m=107340950611167&w=2, http://secunia.com/advisories/10556, http://www.osvdb.org/3442
CVE-2004-0329
FreeChat 1.1.1a allows remote attackers to cause a denial of service (crash) via certain unexpected strings, as demonstrated using "aaaaa".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freechat
References: http://marc.info/?l=bugtraq&m=107781043621074&w=2, http://www.securityfocus.com/bid/9744, https://exchange.xforce.ibmcloud.com/vulnerabilities/15321
CVE-2004-1925
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sort_mode parameter in (1) tiki-usermenu.php, (2) tiki-list_file_gallery.php, (3) tiki-directory_ranking.php, (4) tiki-browse_categories.php, (5) tiki-index.php, (6) tiki-user_tasks.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-file_galleries.php, (10) tiki-list_faqs.php, (11) tiki-list_trackers.php, (12) tiki-list_blogs.php, or via the offset parameter in (13) tiki-usermenu.php, (14) tiki-browse_categories.php, (15) tiki-index.php, (16) tiki-user_tasks.php, (17) tiki-list_faqs.php, (18) tiki-list_trackers.php, or (19) tiki-list_blogs.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tikiwiki_cms//groupware
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://marc.info/?l=bugtraq&m=108180073206947&w=2, http://secunia.com/advisories/11344, http://tikiwiki.org/tiki-read_article.php?articleId=66
CWE: CWE-89
CVE-2004-1208
Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long password field in a join request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: orbz
References: http://marc.info/?l=bugtraq&m=110176280402580&w=2, http://www.securityfocus.com/bid/11774, https://exchange.xforce.ibmcloud.com/vulnerabilities/18298
CVE-2004-1365
Extproc in Oracle 9i and 10g does not require authentication to load a library or execute a function, which allows local users to execute arbitrary commands as the Oracle user.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, oracle10g, oracle8i
References: http://marc.info/?l=bugtraq&m=110382471608835&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.kb.cert.org/vuls/id/316206
CVE-2004-2727
Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a long HTTP GET request.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected Products: mailenable
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://secunia.com/advisories/11588, http://securitytracker.com/id?1010107, http://www.hat-squad.com/en/000071.html
CWE: CWE-119
CVE-2004-1563
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora 4.1.6a allow remote attackers to execute arbitrary web script or HTML via the (1) thread parameter to download_thread.php, (2) loginuser parameter to login.php, or (3) userid parameter to forgot_password.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: w-agora
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html, http://marc.info/?l=bugtraq&m=109655691512298&w=2, http://secunia.com/advisories/12695
CVE-2004-2505
Macromedia ColdFusion MX before 6.1 does not restrict the size of error messages, which allows remote attackers to cause a denial of service (memory consumption and crash) by sending repeated GET or POST requests that trigger error messages that use long strings of data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: coldfusion
References: http://archives.neohapsis.com/archives/bugtraq/2004-04/0184.html, http://www.securityfocus.com/bid/10163, https://exchange.xforce.ibmcloud.com/vulnerabilities/15895
CVE-2004-0292
Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sami_http_server
References: http://marc.info/?l=bugtraq&m=107703630913205&w=2, http://www.security-protocols.com/modules.php?name=News&file=article&sid=1746, http://www.securityfocus.com/bid/9679
CVE-2004-0007
Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim, ultramagnetic
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813, http://marc.info/?l=bugtraq&m=107513690306318&w=2
CVE-2004-2651
Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote attackers to inject arbitrary web script or HTML via the (1) urlmaskfilter parameter to index.html or the (2) page parameter to Wiki.html.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: yacy
References: http://archives.neohapsis.com/archives/bugtraq/2004-12/0413.html, http://securitytracker.com/id?1012686, http://www.osvdb.org/12629
CVE-2004-0582
Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webmin
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000848, http://marc.info/?l=bugtraq&m=108697184602191&w=2, http://www.debian.org/security/2004/dsa-526
CVE-2004-0672
Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: identityminder, policy_server
References: http://marc.info/?l=bugtraq&m=108881203114336&w=2, http://www.securityfocus.com/bid/10645, https://exchange.xforce.ibmcloud.com/vulnerabilities/16618
CVE-2004-0067
Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php.  NOTE: some aspects of vector 10 were later reported to affect 4.1.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpgedview
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=107394912715478&w=2, http://secunia.com/advisories/26628, http://securitytracker.com/id?1018613
CWE: CWE-79
CVE-2004-0633
The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, ethereal, mandrake_linux, linux, linux_advanced_workstation
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916, http://secunia.com/advisories/12024
CVE-2004-1298
Buffer overflow in the parse function in vb2c.c for vb2c 0.02 allows remote attackers to execute arbitrary code via a crafted FRM file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vb2c
References: http://tigger.uic.edu/~jlongs2/holes/vb2c.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18605, http://tigger.uic.edu/~jlongs2/holes/vb2c.txt
CVE-2004-0797
The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: zlib
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt, ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.17/SCOSA-2004.17.txt, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=252253
CVE-2004-1285
Buffer overflow in the get_header function in asf_mmst_streaming.c for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a crafted ASF video stream.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mplayer
References: http://tigger.uic.edu/~jlongs2/holes/mplayer.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18631, http://tigger.uic.edu/~jlongs2/holes/mplayer.txt
CVE-2004-1401
SQL injection vulnerability in verify.asp in Asp-rider allows remote attackers to execute arbitrary SQL statements and bypass authentication via the username parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: asp-rider
References: http://marc.info/?l=bugtraq&m=110305802005220&w=2, http://secunia.com/advisories/13470/, http://www.securityfocus.com/bid/11933
CVE-2004-0974
The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mandrake_linux_corporate_server, fedora_core, open_source_apple_file_share_protocol_suite, mandrake_linux
References: http://www.gentoo.org/security/en/glsa/glsa-200410-25.xml, http://www.trustix.org/errata/2004/0050, https://exchange.xforce.ibmcloud.com/vulnerabilities/17583
CVE-2004-1470
CRLF injection vulnerability in SnipSnap 0.5.2a, and other versions before 1.0b1, allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: snipsnap
References: http://marc.info/?l=bugtraq&m=109518773223511&w=2, http://www.gentoo.org/security/en/glsa/glsa-200409-23.xml, http://www.securityfocus.com/bid/11180
CVE-2004-0035
SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phorum
References: http://marc.info/?l=bugtraq&m=107340481804110&w=2, http://secunia.com/advisories/10567, http://www.osvdb.org/3508
CVE-2004-1561
Buffer overflow in Icecast 2.0.1 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a large number of headers.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: icecast
References: http://aluigi.altervista.org/adv/iceexec-adv.txt, http://marc.info/?l=bugtraq&m=109640005127644&w=2, http://marc.info/?l=bugtraq&m=109674593230539&w=2
CVE-2004-2721
The CheckGroup function in openSkat VTMF before 2.1 generates public key pairs in which the "p" variable might not be prime, which allows remote attackers to determine the private key and decrypt messages.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: openskat
Related CWEs: CWE-310
References: http://freshmeat.net/projects/openskat/?branch_id=36295&release_id=178549, http://securitytracker.com/id?1012181, http://www.osvdb.org/11652
CWE: CWE-310
CVE-2004-2757
Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote attackers to inject arbitrary web script or HTML via url parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ichain
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://secunia.com/advisories/10653, http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm, http://www.securityfocus.com/bid/9412
CWE: CWE-79
CVE-2004-2218
SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL statements via the password parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpmywebhosting
References: http://archives.neohapsis.com/archives/bugtraq/2004-08/0207.html, http://archives.neohapsis.com/archives/bugtraq/2004-09/0247.html, http://www.osvdb.org/8976
CVE-2004-2096
Cross-site scripting (XSS) vulnerability in Mephistoles httpd 0.6.0 final allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mephistoles_httpd
References: http://marc.info/?l=bugtraq&m=107470433714179&w=2, http://secunia.com/advisories/10693, http://www.osvdb.org/3689
CVE-2004-1099
Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and gain unauthorized access via a "cryptographically correct" certificate with valid fields such as the username.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_acs_solution_engine, secure_access_control_server
References: http://www.ciac.org/ciac/bulletins/p-028.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20041102-acs-eap-tls.shtml, http://www.securityfocus.com/bid/11577
CVE-2004-2256
Directory traversal vulnerability in phpMyFAQ 1.4.0 alpha allows remote attackers to read arbitrary files, and possibly execute local PHP files, via .. sequences in the lang (language) variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpmyfaq
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0906.html, http://secunia.com/advisories/11640, http://securitytracker.com/id?1010190
CVE-2004-2375
Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an APOP USER command with a long second parameter (digest).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 1st_class_mail_server
References: http://secunia.com/advisories/11029, http://securitytracker.com/id?1009279, http://www.digiti.be/jeffosz/advisories/1stclasspop3.txt
CVE-2004-0569
The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system crash) via a malicious message, possibly related to improper length values.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_nt
References: http://marc.info/?l=bugtraq&m=109769394209518&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-029, https://exchange.xforce.ibmcloud.com/vulnerabilities/17646
CVE-2004-0042
vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vsftpd
References: http://securitytracker.com/id?1008628, http://securitytracker.com/id?1008628
CVE-2004-1086
Buffer overflow in PSNormalizer for Apple Mac OS X 10.3.6 allows remote attackers to execute arbitrary code via a crafted PostScript input file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quicktime_streaming_server, darwin_streaming_server, mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://secunia.com/advisories/13362/, http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE-2004-0116
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_xp, windows_2003_server
References: http://secunia.com/advisories/11065/, http://securitytracker.com/alerts/2004/Apr/1009758.html, http://www.ciac.org/ciac/bulletins/o-115.shtml
CVE-2004-1664
Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not properly handled by the buffer overflow protection mechanism. NOTE: this issue might overlap CVE-2005-0430.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: call_of_duty_united_offensive, call_of_duty
References: http://marc.info/?l=bugtraq&m=109449953200587&w=2, http://www.securityfocus.com/bid/11119, https://exchange.xforce.ibmcloud.com/vulnerabilities/17286
CVE-2004-2669
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL commands or obtain the installation path via parameters including (1) s, w, and d in users.php, (2) id in comments.php, (3) rusername in auth.php, or (4) h in plug.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: land_down_under
References: http://secunia.com/advisories/13034, http://securitytracker.com/id?1012015, http://www.neocrome.net/index.php?m=single&id=91
CVE-2004-0171
FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd, freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:04.tcp.asc, http://lists.seifried.org/pipermail/security/2004-May/003743.html, http://www.idefense.com/application/poi/display?id=78&type=vulnerabilities
CVE-2004-1096
Archive::Zip Perl module before 1.14, when used by antivirus programs such as amavisd-new, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, etrust_ez_armor, etrust_intrusion_detection, rav_antivirus_desktop, brightstor_arcserve_backup
References: http://secunia.com/advisories/13038/, http://www.gentoo.org/security/en/glsa/glsa-200410-31.xml, http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true
CVE-2004-1343
CVS 1.12 and earlier on Debian GNU/Linux does not properly handle when a mapping for the current repository does not exist in the cvs-repouids file, which allows remote attackers to cause a denial of service (server crash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cvs
References: http://www.debian.org/security/2005/dsa-715, http://www.debian.org/security/2005/dsa-715
CVE-2004-1191
Race condition in SuSE Linux 8.1 through 9.2, when run on SMP systems that have more than 4GB of memory, could allow local users to read unauthorized memory from "foreign memory pages."
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:N/A:N
Affected Products: suse_linux
References: http://www.novell.com/linux/security/advisories/2004_42_kernel.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18137, http://www.novell.com/linux/security/advisories/2004_42_kernel.html
CVE-2004-1322
Cisco Unity 2.x, 3.x, and 4.x, when integrated with Microsoft Exchange, has several hard coded usernames and passwords, which allows remote attackers to gain unauthorized access and change configuration settings or read outgoing or incoming e-mail messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unity_server
References: http://www.ciac.org/ciac/bulletins/p-060.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20041215-unity.shtml, http://www.securityfocus.com/bid/11954
CVE-2004-0534
Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webintelligence, infoview
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0057.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026550.html, http://secunia.com/advisories/12587/
CVE-2004-0238
Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: 0verkill
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016579.html, http://marc.info/?l=bugtraq&m=107577335424509&w=2, http://www.securiteam.com/securitynews/5AP010KC0C.html
CVE-2004-0066
phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php, (2) famlist.php, (3) placelist.php, (4) imageview.php, (5) timeline.php, (6) clippings.php, (7) login.php, and (8) gdbi.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpgedview
References: http://marc.info/?l=bugtraq&m=107394912715478&w=2, http://www.osvdb.org/3464, https://exchange.xforce.ibmcloud.com/vulnerabilities/14215
CVE-2004-2399
Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (CPU consumption) via delayed responses to DNS queries.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sidewinder_g2
References: http://www.osvdb.org/6231, http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf, http://www.osvdb.org/6231
CVE-2004-1169
MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to cause a denial of service (application crash) via an HTTP GET request for a file that does not exist, followed by two carriage returns, which causes a NULL dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: maxdb
References: http://marc.info/?l=bugtraq&m=110244542000340&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18387, http://marc.info/?l=bugtraq&m=110244542000340&w=2
CVE-2004-0800
Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv[0] value.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, call_management_system_server, dtmail, solaris
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57627, http://www.ciac.org/ciac/bulletins/o-202.shtml, http://www.idefense.com/application/poi/display?id=132&type=vulnerabilities
CVE-2004-1112
The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: stormwatch, security_agent
References: http://www.ciac.org/ciac/bulletins/p-036.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20041111-csa.shtml, http://www.securityfocus.com/bid/11659
CVE-2004-0314
Cross-site scripting (XSS) vulnerability in done.jsp in WebzEdit 1.9 and earlier allows remote attackers to execute arbitrary script as other users via the message parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webzedit
References: http://marc.info/?l=bugtraq&m=107757029514146&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/15289, http://marc.info/?l=bugtraq&m=107757029514146&w=2
CVE-2004-1877
The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could allow users to inadvertently reveal their username and password.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: application_server, http_server
References: http://marc.info/?l=bugtraq&m=108067040722235&w=2, http://www.securityfocus.com/bid/10009, https://exchange.xforce.ibmcloud.com/vulnerabilities/15676
CVE-2004-0432
ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: proftpd, secure_linux, linux
References: http://bugs.proftpd.org/show_bug.cgi?id=2267, http://marc.info/?l=bugtraq&m=108335030208523&w=2, http://marc.info/?l=bugtraq&m=108335051011341&w=2
CVE-2004-0310
Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as other users via the stylesheet, which does not strip the semicolon or parentheses, as demonstrated using a background:url.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: livejournal
References: http://marc.info/?l=bugtraq&m=107722627800820&w=2, http://www.securityfocus.com/bid/9700, https://exchange.xforce.ibmcloud.com/vulnerabilities/15268
CVE-2004-0583
The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: debian_linux, usermin, webmin
References: http://marc.info/?l=bugtraq&m=108737059313829&w=2, http://www.debian.org/security/2004/dsa-526, http://www.gentoo.org/security/en/glsa/glsa-200406-12.xml
CVE-2004-0558
The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cups
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000872, http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html, http://marc.info/?l=bugtraq&m=109760654431316&w=2
CVE-2004-1856
devices_update_printer_fw_upload.hts in HP Web JetAdmin 7.5.2546, when no password is set, allows remote attackers to upload arbitrary files to the printer directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: web_jetadmin
References: http://marc.info/?l=bugtraq&m=108016019623003&w=2, http://sh0dan.org/files/hpjadmadv.txt, http://www.securityfocus.com/advisories/6492
CVE-2004-0332
Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: extremail
References: http://marc.info/?l=bugtraq&m=107783767517850&w=2, http://www.securityfocus.com/bid/9754, https://exchange.xforce.ibmcloud.com/vulnerabilities/15329
CVE-2004-1875
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to dnslook.html, (4) account parameter to ignorelist.html, (5) account parameter to showlog.html, (6) db parameter to repairdb.html, (7) login parameter to doaddftp.html (8) account parameter to editmsg.htm, or (9) ip parameter to del.html.  NOTE: the dnslook.html vector was later reported to exist in cPanel 10.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: cpanel
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=108066561608676&w=2, http://secunia.com/advisories/11244, http://secunia.com/advisories/22984
CWE: CWE-79
CVE-2004-1636
Heap-based buffer overflow in the WvTFTPServer::new_connection function in wvtftpserver.cc for WvTftp 0.9 allows remote attackers to execute arbitrary code via a long option string in a TFTP packet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wvtftp
References: http://marc.info/?l=bugtraq&m=109885074513940&w=2, http://secunia.com/advisories/12986, http://www.securityfocus.com/bid/11525
CVE-2004-0229
The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel, linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852, http://security.gentoo.org/glsa/glsa-200407-02.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2004:037
CVE-2004-2142
Unknown vulnerability in the remote tape support (remote.c) in the RMT client for Jorg Schilling sdd 1.28 and 1.31 has unknown impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sdd
References: ftp://ftp.berlios.de/pub/sdd/AN-1.52, http://secunia.com/advisories/12584/, https://exchange.xforce.ibmcloud.com/vulnerabilities/17442
CVE-2004-2617
Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the web root via a .. (dot dot) directly after the initial '/' (slash) in the URI.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pegasi_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0109.html, http://archives.neohapsis.com/archives/bugtraq/2004-03/0136.html, http://secunia.com/advisories/11122
CVE-2004-2266
SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ansel
References: http://secunia.com/advisories/12856, http://secunia.com/secunia_research/2004-17/advisory/, http://securitytracker.com/id?1012434
CVE-2004-1346
The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a malformed probe request to the SVM.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: solaris
References: http://secunia.com/advisories/12104/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57598-1&searchclause=security, http://www.auscert.org.au/render.html?it=4253
CVE-2004-2567
Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: recipants
References: http://secunia.com/advisories/11533, http://securitytracker.com/id?1009984, http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415
CVE-2004-1937
Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbitrary files via .. sequences in (1) the user_langue parameter to index.php or (2) the langue parameter to update.php, or modify arbitrary GLOBAL variables by causing globals.php to be loaded before conf.inc.php via (3) .. sequences in the file parameter with the page parameter set to globals, or (4) ../globals.php in the user_langue parameter, as demonstrated by modifying $nuked[prefix] in the Suggest module.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nuked-klan
References: http://marc.info/?l=bugtraq&m=108222826225823&w=2, http://secunia.com/advisories/11341, http://www.phpsecure.info/v2/tutos/frog/Nuked-KlaN.txt
CVE-2004-1134
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: w3who.dll
References: http://marc.info/?l=full-disclosure&m=110234486823233&w=2, http://www.exaprobe.com/labs/advisories/esa-2004-1206.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18377
CVE-2004-1951
xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the (1) audio.sun_audio_device or (2) dxr3.devicename options in an MRL link.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: xine, xine-ui, xine-lib
References: http://secunia.com/advisories/11433, http://security.gentoo.org/glsa/glsa-200404-20.xml, http://www.osvdb.org/5594
CVE-2004-1016
The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, ubuntu_linux
References: http://isec.pl/vulnerabilities/isec-0019-scm.txt, http://secunia.com/advisories/20162, http://secunia.com/advisories/20163
CVE-2004-0971
The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: kerberos_5
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136304, http://www.gentoo.org/security/en/glsa/glsa-200410-24.xml, http://www.redhat.com/support/errata/RHSA-2005-012.html
CVE-2004-0707
SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=244272, http://marc.info/?l=bugtraq&m=108965446813639&w=2, http://www.securityfocus.com/bid/10698
CVE-2004-1542
Buffer overflow in Soldier of Fortune II 1.03 Gold and earlier allows remote attackers to cause a denial of service (server or client crash) via a long (1) query or (2) reply.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: soldier_of_fortune
References: http://marc.info/?l=bugtraq&m=110124208811327&w=2, http://secunia.com/advisories/13289, http://www.securityfocus.com/bid/11735
CVE-2004-2221
Buffer overflow in SoftCart.exe in Mercantec SoftCart 4.00b allows remote attackers to execute arbitrary code via a long parameter in an HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: softcart
References: http://metasploit.com/projects/Framework/modules/exploits/mercantec_softcart.pm, http://www.osvdb.org/9011, http://www.securityfocus.com/bid/10926
CVE-2004-1370
Multiple SQL injection vulnerabilities in PL/SQL procedures that run with definer rights in Oracle 9i and 10g allow remote attackers to execute arbitrary SQL commands and gain privileges via (1) DBMS_EXPORT_EXTENSION, (2) WK_ACL.GET_ACL, (3) WK_ACL.STORE_ACL, (4) WK_ADM.COMPLETE_ACL_SNAPSHOT, (5) WK_ACL.DELETE_ACLS_WITH_STATEMENT, or (6) DRILOAD.VALIDATE_STMT.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, oracle10g, oracle8i
References: http://marc.info/?l=bugtraq&m=110382596129607&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.kb.cert.org/vuls/id/316206
CVE-2004-1765
Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mod_security
References: http://marc.info/?l=bugtraq&m=107945597331370&w=2, http://secunia.com/advisories/11138, http://www.kb.cert.org/vuls/id/779438
CVE-2004-0750
Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, enterprise_linux_desktop
References: http://www.redhat.com/support/errata/RHSA-2004-434.html, http://www.securityfocus.com/archive/1/419762/100/0/threaded, http://www.securityfocus.com/bid/11240
CVE-2004-0285
PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: allmyguests, allmylinks, allmyvisitors
Related CWEs: CWE-829
Related CAPECs: CAPEC-253, CAPEC-660, CAPEC-695
MITRE ATT&CK Techniques: T1195.001, T1574.006, T1505.005
MITRE ATT&CK Tactics: T1574, T1195, T1505
References: http://marc.info/?l=bugtraq&m=107696209514155&w=2, http://marc.info/?l=bugtraq&m=107696235424865&w=2, http://marc.info/?l=bugtraq&m=107696291728750&w=2
CWE: CWE-829
MITRE ATT&CK techniques: T1195.001, T1574.006, T1505.005, T1176, T1574.013, T1620, T1055, T1505.004
MITRE ATT&CK tactics: T1574, T1195, T1505
CVE-2004-0953
Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long username.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jabber_server
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029346.html, http://marc.info/?l=bugtraq&m=110144303826709&w=2, http://www.securityfocus.com/bid/11741