DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1070
The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, suse_linux, secure_linux, linux_kernel, linux_advanced_workstation
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U, http://secunia.com/advisories/19607, http://secunia.com/advisories/20162
CVE-2004-2683
Unspecified vulnerability in the %XML.Utils.SchemaServer class in InterSystems Cache' 5.0 allows attackers to access arbitrary files on a server.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cache
References: http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/53db65fbb73fc254/37358d45de1cc583, http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/809f96becb84b6da/938000c0f3d48a48, http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/53db65fbb73fc254/37358d45de1cc583
CVE-2004-0498
The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323 packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firewall_engine
References: http://www.stonesoft.com/support/Security_Advisories/6735.html, http://www.uniras.gov.uk/niscc/docs/re-20041026-00956.pdf?lang=en, http://www.stonesoft.com/support/Security_Advisories/6735.html
CVE-2004-2747
Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote authenticated users to determine the existence of arbitrary files via a .. (dot dot) in the DEL command, which triggers different error messages depending on whether the file exists or not.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Affected Products: quick_n_easy_ftp_server
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://secunia.com/advisories/10661, http://www.osvdb.org/3574, http://www.securityfocus.com/archive/1/350224/30/21640/threaded
CWE: CWE-22
CVE-2004-0965
stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://marc.info/?l=bugtraq&m=109837243713696&w=2, http://www.nsfocus.com/english/homepage/research/0402.htm, http://www.securityfocus.com/advisories/7351
CVE-2004-2227
Mozilla Firefox before 1.0 truncates long filenames in the file download dialog box, which makes it easier for remote attackers to trick users into downloading files with dangerous extensions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: firefox
References: http://secunia.com/advisories/13144, http://secunia.com/advisories/13724, http://security.gentoo.org/glsa/glsa-200501-03.xml
CVE-2004-1516
CRLF injection vulnerability in index.php in phpWebSite 0.9.3-4 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the block_username parameter in the user module.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phpwebsite
References: http://marc.info/?l=bugtraq&m=110022027420583&w=2, http://phpwebsite.appstate.edu/index.php?module=announce&ANN_id=863&ANN_user_op=view, http://secunia.com/advisories/13172/
CVE-2004-1435
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via a large number of TCP connections with an invalid response instead of the final ACK (TCP-ACK).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: optical_networking_systems_software
References: http://secunia.com/advisories/12117, http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml, http://www.kb.cert.org/vuls/id/277048
CVE-2004-0470
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_59.00.jsp, http://secunia.com/advisories/11593, http://securitytracker.com/id?1010128
CVE-2004-2230
Heap-based buffer overflow in isakmpd on OpenBSD 3.4 through 3.6 allows local users to cause a denial of service (panic) and corrupt memory via IPSEC credentials on a socket.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://secunia.com/advisories/13443, http://securitytracker.com/id?1012511, http://www.openbsd.org/errata36.html
CVE-2004-1529
Cross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary web script via the (1) type, (2) day, (3) month, or (4) year parameters in a Preview operation, or (5) event comments.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke_event_calendar
References: http://marc.info/?l=bugtraq&m=110064626111756&w=2, http://secunia.com/advisories/13213, http://www.securityfocus.com/bid/11693
CVE-2004-2759
Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might allow local users to read portions of deleted files by accessing data within sparse files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: storeedge_performance_suite, storedge_qfs, storedge_sam-qfs, storeedge_utilization_suite
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-101527-1, http://sunsolve.sun.com/search/document.do?assetkey=1-66-200184-1, http://www.securityfocus.com/bid/11559
CVE-2004-0224
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: courier-imap, linux, courier_mta, sqwebmail
References: http://secunia.com/advisories/11087/, http://sourceforge.net/project/shownotes.php?release_id=5767, http://www.securityfocus.com/bid/9845
CVE-2004-0367
Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835, http://marc.info/?l=bugtraq&m=108058005324316&w=2, http://secunia.com/advisories/11185
CVE-2004-2549
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wlan_access_point_2221, wlan_access_point_2225, wlan_access_point_2220
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0055.html, http://secunia.com/advisories/11034, http://securitytracker.com/id?1009294
CVE-2004-0421
The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, secure_linux, libpng, openpkg, enterprise_linux_desktop
Related CWEs: CWE-125
Related CAPECs: CAPEC-540
References: http://lists.apple.com/mhonarc/security-announce/msg00056.html, http://marc.info/?l=bugtraq&m=108334922320309&w=2, http://marc.info/?l=bugtraq&m=108335030208523&w=2
CWE: CWE-125
CVE-2004-2359
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: truemobile_1300_wlan_mini-pci_card_util_trayapplet
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0042.html, http://secunia.com/advisories/10949, http://securitytracker.com/id?1009174
CVE-2004-1397
Cross-site scripting (XSS) vulnerability in UseModWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via an argument to wiki.pl.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: usemodwiki
References: http://marc.info/?l=bugtraq&m=110305173302388&w=2, http://secunia.com/advisories/13441/, http://www.securityfocus.com/bid/11924
CVE-2004-0605
Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ircd-ratbox, ircd-hybrid
Related CWEs: CWE-16
References: http://marc.info/?l=bugtraq&m=108766803817406&w=2, http://www.securityfocus.com/bid/10572, https://exchange.xforce.ibmcloud.com/vulnerabilities/16457
CWE: CWE-16
CVE-2004-1270
lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are open when lppasswd is called, does not verify that the passwd.new file is different from STDERR, which allows local users to control output to passwd.new via certain user input that triggers an error message.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: fedora_core, cups
References: http://tigger.uic.edu/~jlongs2/holes/cups2.txt, http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
CVE-2004-1994
FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fusetalk
References: http://marc.info/?l=bugtraq&m=108377423825478&w=2, http://secunia.com/advisories/11555, http://www.osvdb.org/5894
CVE-2004-0832
The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: squid
References: http://fedoranews.org/updates/FEDORA--.shtml, http://www.gentoo.org/security/en/glsa/glsa-200409-04.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2004:093
CVE-2004-1383
Multiple SQL injection vulnerabilities in phpGroupWare 0.9.16.003 and earlier allow remote attackers to execute arbitrary SQL statements via the (1) order, (2) project_id, (3) pro_main, or (4) hours_id parameters to index.php or (5) ticket_id to viewticket_details.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgroupware
References: http://marc.info/?l=bugtraq&m=110312656029072&w=2, http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml, http://www.gulftech.org/?node=research&article_id=00054-12142004
CVE-2004-0477
Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password.  NOTE: this identifier was inadvertently re-used for another issue due to a typo; that issue was assigned CVE-2004-0447.  This candidate is ONLY for the ADSL router bypass.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: 3cp4144
References: http://secunia.com/advisories/11716, http://www.idefense.com/application/poi/display?id=106&type=vulnerabilities&flashstatus=false, http://www.securityfocus.com/bid/10426
CVE-2004-0119
The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_server_2003, windows_xp
Related CWEs: CWE-476
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0081.html, http://www.ciac.org/ciac/bulletins/o-114.shtml, http://www.kb.cert.org/vuls/id/638548
CWE: CWE-476
CVE-2004-1647
SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass authentication via (1) admin or Pass parameter to index_next.asp, (2) LoginId, OPass, or NPass to CPassChangePassword.asp, (3) users_edit.asp, or (4) users_add.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: password_protect
References: http://marc.info/?l=bugtraq&m=109414967003192&w=2, http://secunia.com/advisories/12407, http://www.criolabs.net/advisories/passprotect.txt
CVE-2004-1182
hfaxd in HylaFAX before 4.2.1, when installed with a "weak" hosts.hfaxd file, allows remote attackers to authenticate and bypass intended access restrictions via a crafted (1) username or (2) hostname that satisfies a regular expression that is matched against a hosts.hfaxd entry without a password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hylafax
References: http://marc.info/?l=bugtraq&m=110546971307585&w=2, http://marc.info/?l=hylafax&m=110545119911558&w=2, http://secunia.com/advisories/13812
CVE-2004-2397
The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bluecoat_security_gateway
Related CWEs: CWE-312
Related CAPECs: CAPEC-37
MITRE ATT&CK Techniques: T1005, T1552.004
MITRE ATT&CK Tactics: T1552
References: http://secunia.com/advisories/11627, http://www.bluecoat.com/support/knowledge/advisory_private_key_compromise.html, http://www.osvdb.org/6218
CWE: CWE-312
MITRE ATT&CK techniques: T1005, T1552.004
MITRE ATT&CK tactics: T1552
CVE-2004-2377
Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated using a Nessus port scan of ports 1 through 1024 with safe-checks disabled.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: omniswitch, omniswitch_7800
References: http://secunia.com/advisories/10981, http://securitytracker.com/id?1009211, http://www.osvdb.org/4064
CVE-2004-1743
Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: efs_web_server
References: http://marc.info/?l=bugtraq&m=109341398102863&w=2, http://secunia.com/advisories/12372, http://securitytracker.com/id?1011045
CVE-2004-1295
The slip_down function in slip.c for the uml_net program in uml-utilities 20030903, when uml_net is installed setuid root, does not verify whether the calling user has sufficient permission to disable an interface, which allows local users to cause a denial of service (network service disabled).
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: uml-utilities
References: http://tigger.uic.edu/~jlongs2/holes/uml-utilites.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18562, http://tigger.uic.edu/~jlongs2/holes/uml-utilites.txt
CVE-2004-2744
Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "security update release."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mailing_list_manager
References: http://secunia.com/advisories/12994, http://securitytracker.com/id?1011958, http://sourceforge.net/project/shownotes.php?release_id=277981
CVE-2004-1108
qpkg in Gentoolkit 0.2.0_pre10 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary directory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux
References: http://bugs.gentoo.org/show_bug.cgi?id=68846, http://secunia.com/advisories/13108/, http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml
CVE-2004-0775
Buffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as BTStackServer 1.3.2.7 and 1.4.2.10, Windows XP and Windows 98 with MSI Bluetooth Dongles, and HP IPAQ 5450 running WinCE 3.0, allows remote attackers to execute arbitrary code via certain service requests.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: btstackserver, bluetooth_communication_software
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0029.html, http://marc.info/?l=bugtraq&m=109223783402624&w=2, http://www.internetnews.com/security/article.php/3394181
CVE-2004-2519
Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service (CPU consumption) via directory specifiers in the LANGUAGE parameter to (1) index.tmpl and (2) web.tmpl, such as (a) slash "/", (b) backslash "\", (c) dot ".",, (d) dot dot "..", and (e) internal slash "lang//en".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gattaca_server_2003
References: http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt, http://secunia.com/advisories/12071, http://securitytracker.com/id?1010703
CVE-2004-0925
Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html, http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE-2004-2401
Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail_express
References: http://secunia.com/advisories/11352, http://support.ipswitch.com/kb/IM-20031219-DF01.htm, http://www.osvdb.org/5243
CVE-2004-2411
The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting (XSS) attacks that do not use <script> tags, as demonstrated via javascript in IMG tags to (1) the cat parameter in shopdisplayproducts.asp or (2) the msg parameter in shoperror.asp, and possibly other vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vp-asp
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html, http://secunia.com/advisories/11846, http://www.osvdb.org/6949
CVE-2004-2243
Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phorum_uriauth parameter, as demonstrated using profile.php.  NOTE: the affected version was reported to be 4.3.7, but this may be erroneous.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phorum
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0999.html, http://securitytracker.com/id?1010219, https://exchange.xforce.ibmcloud.com/vulnerabilities/16215
CVE-2004-2455
Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wireless_broadband_router_accesspoint_802.11g
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0574.html, http://secunia.com/advisories/11603, http://www.osvdb.org/6109
CVE-2004-1770
The login page for cPanel 9.1.0, and possibly other versions, allows remote attackers to execute arbitrary code via shell metacharacters in the user parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cpanel
References: http://marc.info/?l=bugtraq&m=107911581732035&w=2, http://secunia.com/advisories/11124, http://www.kb.cert.org/vuls/id/831534
CVE-2004-0500
Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim, mandrake_linux, linux
References: http://gaim.sourceforge.net/security/?id=0, http://www.fedoranews.org/updates/FEDORA-2004-278.shtml, http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
CVE-2004-2197
kdocker.cpp in kdocker 0.1 through 0.8 does not properly check the ownership of files, which could allow local users to execute arbitrary programs.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kdocker
References: http://cvs.sourceforge.net/viewcvs.py/kdocker/kdocker/src/kdocker.cpp?r1=1.10&r2=1.11&sortby=log, http://secunia.com/advisories/12828, http://securitytracker.com/id?1011688
CVE-2004-0904
Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, thunderbird, mozilla, linux, firefox
References: http://bugzilla.mozilla.org/show_bug.cgi?id=255067, http://marc.info/?l=bugtraq&m=109698896104418&w=2, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-2370
Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: trillian, trillian_pro
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017766.html, http://secunia.com/advisories/10973/, http://security.e-matters.de/advisories/022004.html
CVE-2004-2583
SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous open connections to TCP port 25.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: smartermail
References: http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt, http://secunia.com/advisories/11042, http://www.zone-h.org/advisories/read/id=4098
CVE-2004-1833
The admin.ib file in Borland Interbase 7.1 for Linux has default world writable permissions, which allows local users to gain database administrative privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interbase
References: http://secunia.com/advisories/11172, http://securitytracker.com/id?1009500, http://www.idefense.com/application/poi/display?id=80&type=vulnerabilities&flashstatus=true
CVE-2004-1218
Remote Execute 2.30 allows remote attackers to cause a denial of service (application crash) by making 7 simultaneous connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: remote_execute
References: http://marc.info/?l=bugtraq&m=110238855010003&w=2, http://www.kb.cert.org/vuls/id/136424, http://www.securityfocus.com/bid/11821
CVE-2004-1580
SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cubecart
References: http://marc.info/?l=bugtraq&m=109713382400457&w=2, http://secunia.com/advisories/12764, http://www.exploit-db.com/exploits/15278
CVE-2004-0408
Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ident2
References: http://www.debian.org/security/2004/dsa-494, http://www.securityfocus.com/bid/10192, https://exchange.xforce.ibmcloud.com/vulnerabilities/15938
CVE-2004-2351
Cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) name, (2) email, (3) city, and (4) message, which do not use the <script> and <style> tags, which are filtered by PHP-Nuke.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: gbook
References: http://securitytracker.com/id?1008930, http://www.securityfocus.com/archive/1/352373, http://www.securityfocus.com/bid/9559
CVE-2004-2703
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted".
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mailsweeper_business_suite_ii, mailsweeper_for_smtp, mimesweeper_for_web, mailsweeper_business_suite_i
Related CWEs: CWE-310
References: http://download.mimesweeper.com/www/TechnicalDocumentation/MSWSMTP505UpdateReadMe.htm, http://secunia.com/advisories/13160, http://www.osvdb.org/11602
CWE: CWE-310
CVE-2004-2469
Unspecified vulnerability in Reservation.class.php for phpScheduleIt 1.01 and earlier allows attackers to modify or delete reservations.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phpscheduleit
References: http://secunia.com/advisories/13206, http://securitytracker.com/alerts/2004/Nov/1012246.html, http://sourceforge.net/tracker/index.php?func=detail&aid=1051841&group_id=95547&atid=611778
CVE-2004-2098
Cross-site scripting (XSS) vulnerability in the banner engine (TBE) 5.0 allows remote attackers to execute arbitrary script as other users via the HTML banner view/preview capability.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: tbe_banner_engine
References: http://marc.info/?l=bugtraq&m=107479071808330&w=2, http://www.securityfocus.com/bid/9472, https://exchange.xforce.ibmcloud.com/vulnerabilities/14911
CVE-2004-1676
Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=109508834910733&w=2, http://secunia.com/advisories/12510, http://www.securityfocus.com/bid/11158
CVE-2004-1600
index.php in CoolPHP 1.0-stable allows remote attackers to gain sensitive information via an invalid op parameter, which reveals the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: coolphp
References: http://marc.info/?l=bugtraq&m=109810941419669&w=2, http://secunia.com/advisories/12850, http://securitytracker.com/id?1011748
CVE-2004-2487
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via (1) "..", (2) "\..\" (backslash dot dot), or (3) "/../" sequences in (a) RETR (get), (b) NLST (ls), (c) LIST (ls), (d) RNFR, or (e) RNTO FTP commands.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Affected Products: nexgen_ftp_server
References: http://secunia.com/advisories/11216, http://www.nexgenserver.com/cgi-bin/loadframe2.cgi?/History.html, http://www.osvdb.org/4557
CVE-2004-2045
The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service (device reboot) via an HTTP request with a long username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cadslr1_adsl_router
References: http://marc.info/?l=bugtraq&m=109045084522857&w=2, http://secunia.com/advisories/12110, http://www.securityfocus.com/bid/10769
CVE-2004-2604
Cross-site scripting (XSS) vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phproxy
References: http://securitytracker.com/id?1012702, http://www.osvdb.org/12627, http://www.securityfocus.com/bid/12115
CVE-2004-0548
Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aspell, linux
References: http://marc.info/?l=bugtraq&m=108675120224531&w=2, http://www.gentoo.org/security/en/glsa/glsa-200406-14.xml, http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html
CVE-2004-0125
The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:12.jailroute.asc, http://www.securityfocus.com/bid/10485, https://exchange.xforce.ibmcloud.com/vulnerabilities/16342
CVE-2004-1221
Directory traversal vulnerability in weblibs.pl in WebLibs 1.0 allows remote attackers to read arbitrary files via .. sequences in the TextFile parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: weblibs
References: http://marc.info/?l=bugtraq&m=110245395510945&w=2, http://secunia.com/advisories/13400/, http://www.securityfocus.com/bid/11848
CVE-2004-0473
Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: opera_browser
Related CWEs: CWE-88
Related CAPECs: CAPEC-137, CAPEC-88, CAPEC-174
References: http://security.gentoo.org/glsa/glsa-200405-19.xml, http://securitytracker.com/id?1010142, http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities
CWE: CWE-88
CVE-2004-0506
The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: propack, ethereal
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
CVE-2004-1444
Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: roundup
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://packetstormsecurity.nl/0406-exploits/roundUP.txt, http://secunia.com/advisories/11801/, http://securitytracker.com/id?1010415
CWE: CWE-22
CVE-2004-2608
SmartWebby Smart Guest Book stores SmartGuestBook.mdb (aka the "news database") under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the unencrypted username and password of the administrator's account.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: smart_guest_book
Related CWEs: CWE-264
References: http://secunia.com/advisories/12401, http://securitytracker.com/id?1011084, http://www.osvdb.org/9363
CWE: CWE-264
CVE-2004-2622
AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: deployment_server_extension_for_ibm_director
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html, http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html, http://packetstorm.linuxsecurity.com/0410-advisories/index2.html
CVE-2004-0167
DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html, http://secunia.com/advisories/10959, http://www.kb.cert.org/vuls/id/578886
CVE-2004-1914
SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via the eid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke, nukecalendar
References: http://marc.info/?l=bugtraq&m=108144168932458&w=2, http://www.securityfocus.com/bid/10082, https://exchange.xforce.ibmcloud.com/vulnerabilities/15799
CVE-2004-2233
Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: moodle
References: http://moodle.org/doc/?file=releaseold.html, http://secunia.com/advisories/12045, http://www.osvdb.org/7710
CVE-2004-1830
error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (1) language, (2) newlang, or (3) lang parameter, which leaks the pathname in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=107963064317560&w=2, http://secunia.com/advisories/11164, http://www.osvdb.org/4386
CVE-2004-1177
Cross-site scripting (XSS) vulnerability in the driver script in mailman before 2.1.5 allows remote attackers to inject arbitrary web script or HTML via a URL, which is not properly escaped in the resulting error page.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mailman
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287555, http://marc.info/?l=bugtraq&m=110549296126351&w=2, http://secunia.com/advisories/13603
CVE-2004-1898
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: monit
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html, http://marc.info/?l=bugtraq&m=108119149103696&w=2, http://secunia.com/advisories/11304
CVE-2004-0930
The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, samba, linux, linux_advanced_workstation, fedora_core
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.17/SCOSA-2005.17.txt, ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000899
CVE-2004-1567
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: silent-storm_portal
References: http://marc.info/?l=bugtraq&m=109655763808924&w=2, http://secunia.com/advisories/12704, http://securitytracker.com/id?1011470
CVE-2004-2349
Multiple SQL injection vulnerabilities in Tunez before 1.20-pre2 allow remote attackers to execute arbitrary SQL queries.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tunez
References: http://secunia.com/advisories/10770/, http://sourceforge.net/tracker/index.php?func=detail&aid=879391&group_id=2266&atid=102266, http://www.securityfocus.com/bid/9565
CVE-2004-0790
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: solaris, windows_2000, windows_me, windows_98se, windows_98
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt, http://marc.info/?l=bugtraq&m=112861397904255&w=2, http://secunia.com/advisories/18317
CVE-2004-0120
The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2000, windows_xp, windows_2003_server
References: http://www.ciac.org/ciac/bulletins/o-114.shtml, http://www.kb.cert.org/vuls/id/150236, http://www.securityfocus.com/bid/10115
CVE-2004-1656
CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: comersus_cart
References: http://marc.info/?l=bugtraq&m=109405777905519&w=2, http://www.securityfocus.com/bid/11083, https://exchange.xforce.ibmcloud.com/vulnerabilities/17201
CVE-2004-0313
Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: psoproxy_server
References: http://marc.info/?l=bugtraq&m=107730731900261&w=2, http://www.securityfocus.com/bid/9706, https://exchange.xforce.ibmcloud.com/vulnerabilities/15275
CVE-2004-1187
Heap-based buffer overflow in the pnm_get_chunk function for xine 0.99.2, and other packages such as MPlayer that use the same code, allows remote attackers to execute arbitrary code via long PNA_TAG values, a different vulnerability than CVE-2004-1188.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mandrake_linux, xine, xine-lib, mplayer
References: http://cvs.sourceforge.net/viewcvs.py/xine/xine-lib/src/input/pnm.c?r1=1.20&r2=1.21, http://www.idefense.com/application/poi/display?id=176&type=vulnerabilities, http://www.mandriva.com/security/advisories?name=MDKSA-2005:011
CVE-2004-0611
Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fvs318
References: http://marc.info/?l=bugtraq&m=108787199201059&w=2, http://www.securityfocus.com/bid/10585, https://exchange.xforce.ibmcloud.com/vulnerabilities/16462
CVE-2004-2551
Multiple SQL injection vulnerabilities in Layton HelpBox 3.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the sys_comment_id parameter in editcommentenduser.asp, (2) the sys_suspend_id parameter in editsuspensionuser.asp, (3) the table parameter in export_data.asp, (4) the sys_analgroup parameter in manageanalgrouppreference.asp, (5) the sys_asset_id parameter in quickinfoassetrequests.asp, (6) the sys_eusername parameter in quickinfoenduserrequests.asp, and the sys_request_id parameter in (7) requestauditlog.asp, (8) requestcommentsenduser.asp, (9) selectrequestapplytemplate.asp, and (10) selectrequestlink.asp, resulting in an ability to create a new HelpBox user account and read, modify, or delete data from the backend database.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: helpbox
References: http://secunia.com/advisories/12118, http://www.osvdb.org/8170, http://www.osvdb.org/8171
CVE-2004-1165
Konqueror 3.3.1 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kdelibs, konqueror
References: http://marc.info/?l=bugtraq&m=110245752232681&w=2, http://www.debian.org/security/2005/dsa-631, http://www.gentoo.org/security/en/glsa/glsa-200501-18.xml
CVE-2004-1355
Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://secunia.com/advisories/11483/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57545-1&searchclause=%22category:security%22%20%20111313-02, http://www.auscert.org.au/render.html?it=4057
CVE-2004-0783
Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gtk, gdkpixbuf
Related CWEs: CWE-787
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875, http://marc.info/?l=bugtraq&m=109528994916275&w=2, http://scary.beasts.org/security/CESA-2004-005.txt
CWE: CWE-787
CVE-2004-2459
Unknown vulnerability in gnubiff 1.2.0 and earlier allows local users to obtain passwords, related to the password table.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gnubiff
References: http://sourceforge.net/project/shownotes.php?group_id=94176&release_id=248016, http://www.osvdb.org/7250, http://sourceforge.net/project/shownotes.php?group_id=94176&release_id=248016
CVE-2004-1851
Dameware Mini Remote Control 4.1.0.0 uses insufficiently random data to create the encryption key, which makes it easier for remote attackers to obtain sensitive information via brute force guessing.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mini_remote_control_server
References: http://marc.info/?l=bugtraq&m=108016344224973&w=2, http://secunia.com/advisories/11205, http://securitytracker.com/id?1009557
CVE-2004-2320
The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Products: weblogic_server
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://dev2dev.bea.com/pub/advisory/68, http://secunia.com/advisories/10726, http://www.kb.cert.org/vuls/id/867593
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2004-2417
Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) client hostname or (2) message-id, which are injected into a syslog message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: smtp.proxy
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0267.html, http://secunia.com/advisories/11823, http://www.osvdb.org/6838
CVE-2004-1761
Unknown vulnerability in Ethereal 0.8.13 to 0.10.2 allows attackers to cause a denial of service (segmentation fault) via a malformed color filter file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://secunia.com/advisories/11185, http://www.ethereal.com/appnotes/enpa-sa-00013.html, http://www.kb.cert.org/vuls/id/695486