DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0883
Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: enterprise_linux, suse_linux, secure_linux, linux_kernel, linux_advanced_workstation
References: http://marc.info/?l=bugtraq&m=110072140811965&w=2, http://marc.info/?l=bugtraq&m=110082989725345&w=2, http://secunia.com/advisories/13232/
CVE-2004-0376
oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: oftpd
References: http://secunia.com/advisories/11220, http://security.gentoo.org/glsa/glsa-200403-08.xml, http://www.debian.org/security/2004/dsa-473
CVE-2004-2168
BaSoMail 1.24 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections to TCP port (1) 25 (SMTP) or (2) 110 (POP3).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: basomail_server
References: http://members.lycos.co.uk/r34ct/main/Baso_mail/Baso_1.24.txt, http://securitytracker.com/id?1008912, http://www.osvdb.org/3789
CVE-2004-1127
Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: direct_connect_peer-to-peer_client
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029383.html, http://marc.info/?l=bugtraq&m=110144606411674&w=2, http://www.gentoo.org/security/en/glsa/glsa-200411-37.xml
CVE-2004-2204
Macromedia ColdFusion MX 6.0 and 6.1 application server, when running with the CreateObject function or CFOBJECT tag enabled, allows local users to conduct unauthorized activities and obtain administrative passwords by creating CFML scripts that use CreateObject or CFOBJECT.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: coldfusion
References: http://secunia.com/advisories/12693, http://www.macromedia.com/devnet/security/security_zone/mpsb04-10.html, http://www.osvdb.org/10718
CVE-2004-2090
Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ie, internet_explorer
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016881.html, http://secunia.com/advisories/10820, http://www.securityfocus.com/bid/9611
CVE-2004-0371
Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: heimdal
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:08.heimdal.asc, ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/009_kerberos.patch, http://security.gentoo.org/glsa/glsa-200404-09.xml
CVE-2004-1619
Buffer overflow in Privateer's Bounty: Age of Sail II allows remote attackers to execute arbitrary code via a long nickname.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: privateers_bounty_age_of_sail_ii
References: http://marc.info/?l=bugtraq&m=109829017407842&w=2, http://secunia.com/advisories/12905, http://www.securityfocus.com/bid/11479
CVE-2004-1443
Cross-site scripting (XSS) vulnerability in the inline MIME viewer in Horde-IMP (Internet Messaging Program) 3.2.4 and earlier, when used with Internet Explorer, allows remote attackers to inject arbitrary web script or HTML via an e-mail message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: imp
References: http://cvs.horde.org/diff.php/imp/docs/CHANGES?r1=1.389.2.106&r2=1.389.2.109&ty=h, http://secunia.com/advisories/12202/, http://www.gentoo.org/security/en/glsa/glsa-200408-07.xml
CVE-2004-2106
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to list directories via a direct request to (1) /com/, (2) /com/novell/, (3) /com/novell/webaccess, or (4) /ns-icons/.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netware
References: http://marc.info/?l=bugtraq&m=107487862304440&w=2, http://www.osvdb.org/13402, http://www.osvdb.org/13403
CVE-2004-1808
Extcompose in metamail does not verify the output file before writing to it, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: metamail
References: http://marc.info/?l=bugtraq&m=107910934926062&w=2, http://www.securityfocus.com/bid/9850, https://exchange.xforce.ibmcloud.com/vulnerabilities/15460
CVE-2004-0387
Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: realplayer, realone_player
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0077.html, http://marc.info/?l=bugtraq&m=108135350810135&w=2, http://secunia.com/advisories/11314
CVE-2004-1868
Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: esignal
References: http://archives.neohapsis.com/archives/bugtraq/2004-04/0056.html, http://marc.info/?l=bugtraq&m=108025234317408&w=2, http://secunia.com/advisories/11222
CVE-2004-1507
CRLF injection vulnerability in login.php in WebCalendar allows remote attackers to inject CRLF sequences via the return_path parameter and perform HTTP Response Splitting attacks to modify expected HTML content from the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: webcalendar
References: http://marc.info/?l=bugtraq&m=110011618724455&w=2, http://secunia.com/advisories/13164, http://www.securityfocus.com/bid/11651
CVE-2004-2444
Cross-site scripting (XSS) vulnerability in index.php in Jaws 0.3 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: jaws
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html, http://securitytracker.com/id?1010651, http://www.osvdb.org/7723
CVE-2004-1912
The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used in PHP-Nuke, allow remote attackers to obtain sensitive information via a URL with an invalid argument, which reveals the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke, nukecalendar
References: http://marc.info/?l=bugtraq&m=108144168932458&w=2, http://www.securityfocus.com/bid/10082, https://exchange.xforce.ibmcloud.com/vulnerabilities/15795
CVE-2004-0444
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: norton_internet_security, client_firewall, norton_antispam, client_security, norton_personal_firewall
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html
CVE-2004-1455
Stack-based buffer overflow in Xine-lib-rc5 in xine-lib 1_rc5-r2 and earlier allows remote attackers to execute arbitrary code via crafted playlists that result in a long vcd:// URL.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: xine-lib
References: http://marc.info/?l=bugtraq&m=109284737628045&w=2, http://open-security.org/advisories/6, http://secunia.com/advisories/12194/
CVE-2004-1670
Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a ....// (doubled dot dot) in the folderold or folder parameters to folders.html.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_mail, mail_server
References: http://marc.info/?l=bugtraq&m=109483971420067&w=2, http://secunia.com/advisories/12789, http://www.securityfocus.com/bid/11371
CVE-2004-1575
The XML parser in Xerces-C++ 2.5.0 allows remote attackers to cause a denial of service (CPU consumption) via XML attributes in a crafted XML document.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xerces-c\+\+
References: http://marc.info/?l=bugtraq&m=109674050017645&w=2, http://secunia.com/advisories/12715, http://www.securityfocus.com/bid/11312
CVE-2004-0981
Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, suse_linux, imagemagick, linux
References: http://secunia.com/advisories/12995/, http://security.gentoo.org/glsa/glsa-200411-11.xml, http://www.imagemagick.org/www/Changelog.html
CVE-2004-1459
Cisco Secure Access Control Server (ACS) 3.2, when configured as a Light Extensible Authentication Protocol (LEAP) RADIUS proxy, allows remote attackers to cause a denial of service (device crash) via certain LEAP authentication requests.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: secure_acs_solution_engine, secure_access_control_server
References: http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml, http://www.securityfocus.com/bid/11047, https://exchange.xforce.ibmcloud.com/vulnerabilities/17116
CVE-2004-2600
The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: carrier_grade_server_tsrlt2, client_system_setup_utility, server_platform_srsh4, server_platform_sr870bn4, server_board_se7501hg2
References: ftp://download.intel.com/support/motherboards/server/sb/aa6791invalidlanconfiguration040504.pdf, http://secunia.com/advisories/11315, http://support.intel.com/support/motherboards/server/sb/CS-010422.htm
CVE-2004-0165
Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html, http://www.atstake.com/research/advisories/2004/a022304-1.txt, http://www.kb.cert.org/vuls/id/841742
CVE-2004-0395
The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gatos
References: http://www.debian.org/security/2004/dsa-509, http://www.securityfocus.com/bid/10437, https://exchange.xforce.ibmcloud.com/vulnerabilities/16273
CVE-2004-0967
The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ghostscript
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.19/SCOSA-2006.19.txt, ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.23/SCOSA-2006.23.txt, http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136321
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2004-2373
The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: instant_messenger
References: http://www.securityfocus.com/archive/1/354448, http://www.securityfocus.com/bid/9698, https://exchange.xforce.ibmcloud.com/vulnerabilities/15310
CVE-2004-1820
PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 4nalbum_module
References: http://marc.info/?l=bugtraq&m=107937780222514&w=2, http://secunia.com/advisories/11134, http://www.osvdb.org/4292
CVE-2004-1972
SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the (1) clipid or (2) catid parameters in a viewclip, viewcat, or voteclip action.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108308660628557&w=2, http://www.securityfocus.com/bid/10215, https://exchange.xforce.ibmcloud.com/vulnerabilities/15979
CVE-2004-0215
Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: definity_one_media_server, modular_messaging_message_storage_server, ip600_media_servers, s8100, outlook_express
References: http://www.kb.cert.org/vuls/id/869640, http://www.us-cert.gov/cas/techalerts/TA04-196A.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-018
CVE-2004-1668
Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: factory_subjects_module
References: http://marc.info/?l=bugtraq&m=109483089621955&w=2, http://secunia.com/advisories/12497, http://www.securityfocus.com/bid/11148
CVE-2004-0077
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kernel_source, bigmem_kernel, secure_linux, linux_kernel, netwosix_linux
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0040.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000820, http://fedoranews.org/updates/FEDORA-2004-079.shtml
CVE-2004-0232
Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: slackware_linux, midnight_commander, propack, linux
References: http://security.gentoo.org/glsa/glsa-200405-21.xml, http://www.debian.org/security/2004/dsa-497, http://www.mandriva.com/security/advisories?name=MDKSA-2004:039
CVE-2004-2550
Multiple cross-site scripting (XSS) vulnerabilities in unspecified Perl scripts in SandSurfer before 1.7.1 allow remote attackers to inject arbitrary web script or HTML, which is later executed by a target who views reports containing the injected data.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: sandsurfer
References: http://secunia.com/advisories/11028, http://sourceforge.net/forum/forum.php?forum_id=356882, http://www.osvdb.org/4132
CVE-2004-1727
BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: badblue
References: http://marc.info/?l=bugtraq&m=109309119502208&w=2, http://secunia.com/advisories/12346, http://www.gulftech.org/?node=research&article_id=00043-08202004
CVE-2004-2064
Cross-site scripting (XSS) vulnerability in lostBook 1.1 and earlier allows remote attackers to inject arbitrary web script via the (1) Email or (2) Website fields.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: lostbook
References: http://marc.info/?l=bugtraq&m=109112282611808&w=2, http://secunia.com/advisories/12190, http://securitytracker.com/id?1010812
CVE-2004-2076
Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vbulletin
References: http://www.securityfocus.com/archive/1/353869, http://www.securityfocus.com/bid/9656, https://exchange.xforce.ibmcloud.com/vulnerabilities/15208
CVE-2004-2603
Cross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL) allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: help_center_live
References: http://secunia.com/advisories/13652, http://securitytracker.com/id?1012685, http://www.gulftech.org/?node=research&article_id=00058-12242004
CVE-2004-0846
Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: excel, office
References: http://marc.info/?l=bugtraq&m=109779810827096&w=2, http://secunia.com/advisories/12800/, http://www.ciac.org/ciac/bulletins/p-009.shtml
CVE-2004-2443
Jaws 0.3 allows remote attackers to bypass authentication and via an HTTP request to admin.php with the logged cookie set to the MD5 hash of a null password, which is compared against the logged session variable by the logged_on function in application.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jaws
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html, http://securitytracker.com/id?1010651, http://www.osvdb.org/7724
CVE-2004-0988
Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (memory consumption) via certain inputs that cause a large memory operation.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quicktime
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html, http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html
CVE-2004-0045
Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: inn
References: http://archives.neohapsis.com/archives/bugtraq/2004-01/0063.html, http://archives.neohapsis.com/archives/bugtraq/2004-01/0064.html, http://secunia.com/advisories/10578
CVE-2004-0816
Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
Related CWEs: CWE-191
References: http://secunia.com/advisories/11202/, http://www.mandriva.com/security/advisories?name=MDKSA-2005:022, http://www.novell.com/linux/security/advisories/2004_37_kernel.html
CWE: CWE-191
CVE-2004-2722
Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords.  NOTE: the original researcher reports that the vendor has disputed this issue
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nessus
Related CWEs: CWE-255
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-03/1363.html, http://securitytracker.com/id?1009575, http://www.osvdb.org/4816
CWE: CWE-255
CVE-2004-0523
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: propack, tinysofa_enterprise_server, kerberos, solaris, sunos
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860
CVE-2004-1932
SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded SQL in the admin parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108180334918576&w=2, http://www.waraxe.us/index.php?modname=sa&id=18, https://exchange.xforce.ibmcloud.com/vulnerabilities/15835
CVE-2004-2020
Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inject arbitrary HTML or web script into the (1) optionbox parameter in the News module, (2) date parameter in the Statistics module, (3) year, month, and month_1 parameters in the Stories_Archive module, (4) mode, order, and thold parameters in the Surveys module, or (5) a SQL statement to index.php, as processed by mainfile.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108482957715299&w=2, http://secunia.com/advisories/11625, http://www.osvdb.org/6225
CVE-2004-0301
Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: store_kit
References: http://secunia.com/advisories/10902/, http://securitytracker.com/alerts/2004/Feb/1009079.html, http://www.securityfocus.com/bid/9676
CVE-2004-1621
NOTE: this issue has been disputed by the vendor.  Cross-site scripting (XSS) vulnerability in IBM Lotus Notes R6 and Domino R6, and possibly earlier versions, allows remote attackers to execute arbitrary web script or HTML via square brackets at the beginning and end of (1) computed for display, (2) computed when composed, or (3) computed text element fields.  NOTE: the vendor has disputed this issue, saying that it is not a problem with Notes/Domino itself, but with the applications that do not properly handle this feature
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: lotus_domino
References: http://marc.info/?l=bugtraq&m=109812960023736&w=2, http://marc.info/?l=bugtraq&m=109841682529328&w=2, http://secunia.com/advisories/12891
CVE-2004-1801
Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pwebserver_web_server
References: http://marc.info/?l=bugtraq&m=107876388211413&w=2, http://secunia.com/advisories/11057, http://www.autistici.org/fdonato/advisory/PWebServer0.3.3-adv.txt
CVE-2004-2743
upload.cgi in Mega Upload Progress Bar before 1.45 allows remote attackers to copy or overwrite arbitrary files via unspecified parameters related to names of uploaded files.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mega_upload_progress_bar
Related CWEs: CWE-264
References: http://secunia.com/advisories/12993, http://securitytracker.com/id?1011960, http://sourceforge.net/project/shownotes.php?release_id=277989
CWE: CWE-264
CVE-2004-1469
Format string vulnerability in the log function in SUS 2.0.2, and other versions before 2.0.6, allows local users to execute arbitrary code via format string specifiers in a command line argument that is passed directly to syslog.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sus
References: http://marc.info/?l=bugtraq&m=109517782910407&w=2, http://pdg.uow.edu.au/sus/CHANGES, http://security.lss.hr/index.php?page=details&ID=LSS-2004-09-01
CVE-2004-0799
The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: whatsup_gold
References: http://www.idefense.com/application/poi/display?id=142&type=vulnerabilities, http://www.ipswitch.com/Support/WhatsUp/patch-upgrades.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/17418
CVE-2004-1209
Verisign Payflow Link, when running with empty Accepted URL fields, does not properly verify the data in the hidden AMOUNT field, which allows remote attackers to modify the price of the items that they purchase.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: payflow_link
References: http://marc.info/?l=bugtraq&m=110181288820226&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18299, http://marc.info/?l=bugtraq&m=110181288820226&w=2
CVE-2004-0964
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, zinf
References: http://marc.info/?l=bugtraq&m=109608092609200&w=2, http://marc.info/?l=bugtraq&m=109638486728548&w=2, http://secunia.com/advisories/12656
CVE-2004-2345
Unknown multiple vulnerabilities in Oracle9i Database Server 9.0.1.4, 9.0.1.5, 9.2.0.3, and 9.2.0.4 allow local users with the ability to invoke SQL to cause a denial of service or obtain sensitive information.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: database_server
References: http://otn.oracle.com/deploy/security/pdf/2004alert64.pdf, http://www.securityfocus.com/bid/9705, https://exchange.xforce.ibmcloud.com/vulnerabilities/15271
CVE-2004-2513
Buffer overflow in the IMAP service of Mercury (Pegasus) Mail 4.01 allows remote attackers to execute arbitrary code via a long SELECT command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pegasus
References: http://home.kabelfoon.nl/~jaabogae/han/m_401b.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18295, https://www.exploit-db.com/exploits/663
CVE-2004-0892
Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: proxy_server, isa_server, windows_2003_server
References: http://www.securityfocus.com/bid/11605, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-039, https://exchange.xforce.ibmcloud.com/vulnerabilities/17906
CVE-2004-0603
gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gzip
References: http://bugs.gentoo.org/show_bug.cgi?id=54890, http://security.gentoo.org/glsa/glsa-200406-18.xml, http://www.securityfocus.com/bid/10603
CVE-2004-0982
Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mpg123
References: http://marc.info/?l=bugtraq&m=109834486312407&w=2, http://secunia.com/advisories/12908, http://securitytracker.com/id?1011832
CVE-2004-0802
Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, suse_linux, linux, java_desktop_system, mandrake_linux
References: http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000870, http://sunsolve.sun.com/search/document.do?assetkey=1-66-201611-1
CVE-2004-2284
The read_list_from_file function in vacation.pl for OpenWebmail before 2.32 20040629 allows remote attackers to execute arbitrary commands via shell metacharacters in a filename argument.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: open_webmail
References: http://openwebmail.org/openwebmail/download/cert/advisories/SA-04:04.txt, http://secunia.com/advisories/12017, http://securitytracker.com/id?1010605
CVE-2004-0665
csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: csfaq
References: http://marc.info/?l=bugtraq&m=108844203121238&w=2, http://www.securityfocus.com/bid/10618, http://www.swp-zone.org/archivos/advisory-08.txt
CVE-2004-1308
Integer overflow in (1) tif_dirread.c and (2) tif_fax3.c for libtiff 3.5.7 and 3.7.0 allows remote attackers to execute arbitrary code via a TIFF file containing a TIFF_ASCII or TIFF_UNDEFINED directory entry with a -1 entry count, which leads to a heap-based buffer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: libtiff
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000920, http://lists.apple.com/archives/security-announce/2005/May/msg00001.html, http://secunia.com/advisories/13776
CVE-2004-1878
LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linbox_officeserver
References: http://marc.info/?l=bugtraq&m=108067245401673&w=2, http://secunia.com/advisories/11264, http://www.securityfocus.com/bid/10010
CVE-2004-0053
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ripmime, mailsweeper, internet_gatekeeper
References: http://marc.info/?l=bugtraq&m=109520704408739&w=2, http://www.uniras.gov.uk/vuls/2004/380375/mime.htm, https://exchange.xforce.ibmcloud.com/vulnerabilities/17331
CVE-2004-0759
Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an <input type="file"> tag.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mozilla
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://bugzilla.mozilla.org/show_bug.cgi?id=241924, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-1834
mod_disk_cache in Apache 2.0 through 2.0.49 stores client headers, including authentication information, on the hard disk, which could allow local users to gain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://marc.info/?l=bugtraq&m=107981737322495&w=2, http://secunia.com/advisories/11176, http://secunia.com/advisories/19072
CVE-2004-0697
Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webstar
References: ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt, http://www.atstake.com/research/advisories/2004/a071304-1.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/16688
CVE-2004-2155
Online-bookmarks before 0.4.6 allows remote attackers to bypass its authentication mechanism via a direct request to (1) config/*, (2) bookmarks.php, (3) footer.php, (4) main.php, (5) tree.php, or (6) functions.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_based_bookmark_application
References: http://freshmeat.net/projects/onlinebookmarks/?branch_id=34962&release_id=174401, http://secunia.com/advisories/12728/, http://www.securityfocus.com/bid/11305
CVE-2004-2296
The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke
References: http://secunia.com/advisories/11852, http://www.osvdb.org/7001, http://www.securityfocus.com/archive/1/365865
CVE-2004-1917
Format string vulnerability in test_func_func in LCDProc 0.4.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the str variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lcdproc
References: http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html, http://marc.info/?l=bugtraq&m=108146376315229&w=2, http://secunia.com/advisories/11333
CVE-2004-0757
Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: thunderbird, mozilla, firefox
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://bugzilla.mozilla.org/show_bug.cgi?id=229374, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-0266
SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=107635110327066&w=2, http://www.securityfocus.com/bid/9615, https://exchange.xforce.ibmcloud.com/vulnerabilities/15080
CVE-2004-0250
SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: photopost_php_pro
References: http://marc.info/?l=bugtraq&m=107593114909696&w=2, http://www.securityfocus.com/bid/9557, http://www.zone-h.org/en/advisories/read/id=3864/
CVE-2004-0156
Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ssmtp
References: http://marc.info/?l=bugtraq&m=108403772130855&w=2, http://secunia.com/advisories/11378, http://secunia.com/advisories/11384
CVE-2004-1511
Hotfoon 4.0 does not notify users before opening links in web browsers, which could allow remote attackers to execute arbitrary code via a certain link sent in a chat window.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: hotfoon
References: http://marc.info/?l=bugtraq&m=110014517703092&w=2, http://secunia.com/advisories/13173, https://exchange.xforce.ibmcloud.com/vulnerabilities/18038
CVE-2004-0163
Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: secure_enterprise
References: http://marc.info/?l=bugtraq&m=109215685731675&w=2, http://www.corsaire.com/advisories/c031120-002.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/16945
CVE-2004-2766
Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: enterprise_linux, iplanet_messaging_server, one_messaging_server, solaris
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-55-1, http://sunsolve.sun.com/search/document.do?assetkey=1-66-201180-1, http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-55-1
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2004-2364
Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using (1) admin/page.php, (2) admin/news.php, (3) admin/user.php, (4) admin/images.php, (5) admin/page.php, or (6) admin/forums.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phpx
References: http://secunia.com/advisories/11554, http://securitytracker.com/id?1010061, http://www.osvdb.org/5907
CVE-2004-2038
Cross-site scripting (XSS) vulnerability in Land Down Under (LDU) before LDU 700 allows remote attackers to inject arbitrary web script or HTML via a BBcode img tag in (1) functions.php, (2) header.php or (3) auth.inc.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: land_down_under
References: http://ldu.neocrome.net/page.php?id=1357, http://marc.info/?l=bugtraq&m=108585789220174&w=2, http://secunia.com/advisories/11739
CVE-2004-0210
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt, interix
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
WARNING: This vulnerability is in CISA's Known Exploited Vulnerabilities (KEV) catalog
References: http://www.kb.cert.org/vuls/id/647436, http://www.us-cert.gov/cas/techalerts/TA04-196A.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020
CWE: CWE-120
CVE-2004-1594
Cross-site scripting (XSS) vulnerability in FuseTalk 4.0 allows remote attackers to execute arbitrary web script via an img src tag.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: fusetalk
References: http://marc.info/?l=bugtraq&m=109768460312168&w=2, http://secunia.com/advisories/12823, http://www.securityfocus.com/bid/11393
CVE-2004-1916
Multiple buffer overflows in LCDProc 0.4.1, and possibly other 0.4.x versions up to 0.4.4, allows remote attackers to execute arbitrary code via (1) a long invalid command to parse_all_client_messages function, or (2) long argv command to test_func_func function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lcdproc
References: http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html, http://marc.info/?l=bugtraq&m=108146376315229&w=2, http://secunia.com/advisories/11333
CVE-2004-2718
PHPMyChat 0.14.5 does not remove or protect setup.php3 after installation, which allows attackers to obtain sensitive information including database passwords via a direct request.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: phpmychat
Related CWEs: CWE-264
References: http://secunia.com/advisories/11894, http://www.securiteam.com/unixfocus/6D00S0KC0S.html, http://secunia.com/advisories/11894
CWE: CWE-264
CVE-2004-0030
PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains the code.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgedview
Related CWEs: CWE-829
Related CAPECs: CAPEC-253, CAPEC-660, CAPEC-695
MITRE ATT&CK Techniques: T1195.001, T1574.006, T1505.005
MITRE ATT&CK Tactics: T1574, T1195, T1505
References: http://marc.info/?l=bugtraq&m=107340840209453&w=2, http://secunia.com/advisories/10565, http://www.osvdb.org/3343
CWE: CWE-829
MITRE ATT&CK techniques: T1195.001, T1574.006, T1505.005, T1176, T1574.013, T1620, T1055, T1505.004
MITRE ATT&CK tactics: T1574, T1195, T1505
CVE-2004-1613
Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, propack, mozilla, linux, linux_advanced_workstation
References: http://lcamtuf.coredump.cx/mangleme/gallery/, http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html, http://marc.info/?l=bugtraq&m=109811406620511&w=2
CVE-2004-1731
signup_page.php in Mantis bugtracker allows remote attackers to send e-mail bombs by creating multiple users and providing the same e-mail address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mantis
References: http://marc.info/?l=bugtraq&m=109312225727345&w=2, http://www.securityfocus.com/bid/10995, https://exchange.xforce.ibmcloud.com/vulnerabilities/17093
CVE-2004-2094
Cross-site scripting (XSS) vulnerability in WebcamXP 1.06.945 allows remote attackers to inject arbitrary HTML or web script as other users via a URL that contains the script.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webcam_xp
References: http://marc.info/?l=bugtraq&m=107471195326270&w=2, http://www.securityfocus.com/bid/9465, https://exchange.xforce.ibmcloud.com/vulnerabilities/14904
CVE-2004-2596
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quake_ii_server
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html, http://secunia.com/advisories/13013, http://secur1ty.net/advisories/001
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036