DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1838
Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: xweb
References: http://marc.info/?l=bugtraq&m=107997946623770&w=2, http://secunia.com/advisories/11186, http://securitytracker.com/id?1009514
CVE-2004-1524
Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (game interruption) via a malformed UDP packet sent to a game port, such as port 29200.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hired_team_trial
References: http://marc.info/?l=bugtraq&m=110054260919742&w=2, http://secunia.com/advisories/13207, http://www.securityfocus.com/bid/11683
CVE-2004-0557
Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sox, enterprise_linux, linux, fedora_core, enterprise_linux_desktop
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0014.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000855, http://lwn.net/Articles/95529/
CVE-2004-0492
Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: webproxy, propack, http_server, openbsd, vvos
References: ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://marc.info/?l=bugtraq&m=108711172710140&w=2, http://marc.info/?l=bugtraq&m=130497311408250&w=2
CVE-2004-2125
Buffer overflow in blackd.exe for BlackICE PC Protection 3.6 and other versions before 3.6.ccb, with application protection off, allows local users to gain system privileges by modifying the .INI file to contain a long packetLog.fileprefix value.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: realsecure_desktop, blackice_pc_protection, blackice_server_protection, blackice_agent_server
References: http://archives.neohapsis.com/archives/iss/2004-q1/0157.html, http://marc.info/?l=bugtraq&m=107530966524193&w=2, http://secunia.com/advisories/10739
CVE-2004-1474
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: nexland_wavebase_firewall_appliance, firewall_vpn_appliance_200r, nexland_pro400_firewall_appliance, firewall_vpn_appliance_200, gateway_security_320
References: http://marc.info/?l=bugtraq&m=109588376426070&w=2, http://secunia.com/advisories/12635, http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html
CVE-2004-2577
The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpgroupware
References: http://www.osvdb.org/7618, http://www.securityfocus.com/bid/12237, https://savannah.gnu.org/bugs/?func=detailitem&item_id=7227
CVE-2004-1197
Cross-site scripting (XSS) vulnerability in inshop.pl in Insite inShop allows remote attackers to inject arbitrary web script or HTML via the screen parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: inshop, inmail
References: http://marc.info/?l=bugtraq&m=110140029419018&w=2, http://secunia.com/advisories/13188/, http://www.securityfocus.com/bid/11758
CVE-2004-1262
Buffer overflow in the bsb_open_header function in libbsb for bsb2ppm 0.0.6 allows remote attackers to execute arbitrary code via crafted BSB pictures.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bsb2ppm
References: http://tigger.uic.edu/~jlongs2/holes/bsb2ppm.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18586, http://tigger.uic.edu/~jlongs2/holes/bsb2ppm.txt
CVE-2004-2589
Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gaim
References: http://gaim.sourceforge.net/security/?id=6, http://secunia.com/advisories/12383, http://securitytracker.com/id?1011083
CVE-2004-0931
MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: maxdb
References: http://www.idefense.com/application/poi/display?id=150&type=vulnerabilities&flashstatus=false, http://www.osvdb.org/10532, http://www.secunia.com/advisories/12756
CVE-2004-2135
cryptoloop on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
References: http://marc.info/?l=linux-kernel&m=107719798631935&w=2, http://mareichelt.de/pub/notmine/diskenc.pdf, http://www.securiteam.com/exploits/5UP0P1PFPM.html
CVE-2004-1644
Xedus 1.0 allows remote attackers to cause a denial of service (refuse connections) by connecting multiple times from the same IP address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xedus
References: http://marc.info/?l=bugtraq&m=109394018411394&w=2, http://secunia.com/advisories/12418, http://www.gulftech.org/?node=research&article_id=00047-08302004
CVE-2004-0316
Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service (crash) via (1) a large GET request to port 1080 or (2) a large GET request of % characters to port 8080.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: avirt_soho
References: http://marc.info/?l=bugtraq&m=107756666701194&w=2, http://www.securityfocus.com/bid/9722, http://www.securityfocus.com/bid/9723
CVE-2004-1936
ZoneAlarm Pro 4.5.538.001 and possibly other versions allows remote attackers to bypass e-mail protection via attachments whose names contain certain non-English characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zonealarm
References: http://marc.info/?l=bugtraq&m=108206751931251&w=2, http://marc.info/?l=bugtraq&m=108248415509417&w=2, http://www.securityfocus.com/bid/10148
CVE-2004-2534
Fastream NETFile Server 7.1.2 does not properly handle keep-alive connection timeouts and does not close the connection after a HEAD request, which allows remote attackers to perform a denial of service (connection consumption) by sending a large number HTTP HEAD requests.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: netfile_server
References: http://secunia.com/advisories/13268, http://securitytracker.com/id?1012267, http://users.pandora.be/bratax/advisories/b003.html
CVE-2004-2714
Unspecified vulnerability in Window Maker 0.80.2 and earlier allows attackers to perform unknown actions via format string specifiers in a font specification in WMGLOBAL, probably a format string vulnerability.
CVSS v2.0 Score: 6.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Affected Products: windowmaker
Related CWEs: CWE-134
Related CAPECs: CAPEC-135, CAPEC-67
References: http://secunia.com/advisories/12961, http://securitytracker.com/id?1011918, http://www.osvdb.org/11108
CWE: CWE-134
CVE-2004-0951
The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ignite-ux
References: http://secunia.com/advisories/16456/, http://securitytracker.com/id?1014711, http://www.corsaire.com/advisories/c041123-001.txt
CVE-2004-1151
Multiple buffer overflows in the (1) sys32_ni_syscall and (2) sys32_vm86_warning functions in sys_ia32.c for Linux 2.6.x may allow local attackers to modify kernel memory and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel, ubuntu_linux
References: http://linux.bkbits.net:8080/linux-2.6/cset%401.2079, http://linux.bkbits.net:8080/linux-2.6/gnupatch%4041ae6af1cR3mJYlW6D8EHxCKSxuJiQ, http://marc.info/?l=bugtraq&m=110306397320336&w=2
CVE-2004-0043
Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in the download feature.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: messenger
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015334.html, http://marc.info/?l=bugtraq&m=107357996802255&w=2, http://secunia.com/advisories/10573
CVE-2004-2384
NullSoft Winamp 5.02 allows remote attackers to cause a denial of service (crash) by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: winamp
References: http://www.securityfocus.com/archive/1/357986, http://www.securityfocus.com/archive/1/358097, http://www.securityfocus.com/bid/9920
CVE-2004-0482
Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch, ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch, http://marc.info/?l=full-disclosure&m=108481812926420&w=2
CVE-2004-1111
Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: multiservice_platform_2651xm, catalyst_7600, multiservice_platform_2650, ios, 7300_router
References: http://www.ciac.org/ciac/bulletins/p-034.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml, http://www.kb.cert.org/vuls/id/630104
CVE-2004-0983
The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mandrake_linux, mandrake_linux_corporate_server, linux, ubuntu_linux, ruby
References: http://www.debian.org/security/2004/dsa-586, http://www.mandriva.com/security/advisories?name=MDKSA-2004:128, http://www.redhat.com/support/errata/RHSA-2004-635.html
CVE-2004-0466
WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webconnect
References: http://marc.info/?l=bugtraq&m=110910838600145&w=2, http://secunia.com/advisories/14006/, http://www.cirt.dk/advisories/cirt-29-advisory.pdf
CVE-2004-2413
SQL injection vulnerability in VP-ASP Shopping Cart 4.0 through 5.0 allows remote attackers to execute arbitrary SQL commands via the (1) Processed0 and (2) Processed1 parameters in a POST request to shopproductselect.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vp-asp
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html, http://www.securityfocus.com/bid/10536, https://exchange.xforce.ibmcloud.com/vulnerabilities/16400
CVE-2004-1413
Multiple SQL injection vulnerabilities in Kayako eSupport 2.x allow remote attackers to execute arbitrary SQL commands via the (1) subcat, (2) rate, (3) questiondetails, (4) ticketkey22, (5) email22 parameters to index.php, or (6) the e-mail field of the Forgot Key feature.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: esupport
References: http://marc.info/?l=bugtraq&m=110352428607171&w=2, http://www.gulftech.org/?node=research&article_id=00056-12182004, http://www.securityfocus.com/bid/12037
CVE-2004-0778
CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cvs
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://www.idefense.com/application/poi/display?id=130&type=vulnerabilities, http://www.kb.cert.org/vuls/id/579225, http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:108
CWE: CWE-203
CVE-2004-1604
cPanel 9.9.1-RELEASE-3 allows remote authenticated users to chmod arbitrary files via a symlink attack on the _private directory, which is created when Front Page extensions are enabled.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: cpanel
References: http://marc.info/?l=bugtraq&m=109811762230326&w=2, http://marc.info/?l=bugtraq&m=109811762230326&w=2
CVE-2004-1876
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: clamav
References: http://marc.info/?l=bugtraq&m=108066864608615&w=2, http://secunia.com/advisories/11253, http://security.gentoo.org/glsa/glsa-200405-03.xml
CVE-2004-1465
Multiple buffer overflows in WinZip 9.0 and earlier may allow attackers to execute arbitrary code via multiple vectors, including the command line.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: winzip
References: http://marc.info/?l=bugtraq&m=109416099301369&w=2, http://securitytracker.com/id?1011132, http://www.ciac.org/ciac/bulletins/o-211.shtml
CVE-2004-1175
fish.c in midnight commander allows remote attackers to execute arbitrary programs via "insecure filename quoting," possibly using shell metacharacters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, midnight_commander, debian_linux, suse_linux, linux
References: http://secunia.com/advisories/13863/, http://securitytracker.com/id?1012903, http://www.debian.org/security/2005/dsa-639
CVE-2004-2278
Unknown cross-site scripting (XSS) vulnerability in the web GUI in vHost before 3.10r1 has unknown impact and attack vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vhost
References: http://chaogic.com/vhost/ChangeLog.txt, http://secunia.com/advisories/11113, http://securitytracker.com/id?1009404
CVE-2004-2495
The (1) Webmail, (2) admin, and (3) SMTP services in Ability Mail Server 1.18 allow remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous connections to the service.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: ability_mail_server
References: http://members.lycos.co.uk/r34ct/main/Ability_mail_server_1.18.txt, http://secunia.com/advisories/12039, http://securitytracker.com/id?1010672
CVE-2004-1283
Buffer overflow in the Mesh::type method in mesh.c for the mview program in Mesh Viewer 0.2.2 allows remote attackers to execute arbitrary code via crafted mesh files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mesh_viewer
References: http://tigger.uic.edu/~jlongs2/holes/meshviewer.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18616, http://tigger.uic.edu/~jlongs2/holes/meshviewer.txt
CVE-2004-1326
Buffer overflow in dxterm in Ultrix 4.5 allows local users to execute arbitrary code via a long -setup parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dxterm
References: http://marc.info/?l=bugtraq&m=110356470029424&w=2, http://www.frsirt.com/exploits/20041220.ultrix_dxterm_4.5_exploit.c.php, http://www.securityfocus.com/bid/12049
CVE-2004-1500
Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kiss_psycho_circus, contract_jack, shogo, global_operations, no_one_lives_forever
References: http://aluigi.altervista.org/adv/lithfs-adv.txt, http://marc.info/?l=bugtraq&m=109969394601331&w=2, http://secunia.com/advisories/13116/
CVE-2004-1784
Buffer overflow in the web server of Webcam Watchdog 3.63 allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webcam_watchdog
References: http://secunia.com/advisories/10527, http://www.elitehaven.net/webcamwatchdog.txt, http://www.osvdb.org/3312
CVE-2004-2352
Cross-site scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via cookies that are stored in the $_COOKIE PHP variable, which is not cleansed by PHP-Nuke.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: gbook
References: http://securitytracker.com/id?1008930, http://www.securityfocus.com/archive/1/352373, http://www.securityfocus.com/bid/9559
CVE-2004-2448
S-Mart Shopping Cart or RediCart 3.9.5b stores smart.cfg under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the database name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: redicart, s-mart_shopping_cart
References: http://secunia.com/advisories/13301, http://securitytracker.com/id?1012306, http://www.osvdb.org/12117
CVE-2004-1766
The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netscreen-security_manager_2004
References: http://secunia.com/advisories/10675, http://www.juniper.net/support/security/alerts/58290.txt, http://www.kb.cert.org/vuls/id/927630
CVE-2004-0315
Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long GET request on port 1080.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: voice
References: http://marc.info/?l=bugtraq&m=107756584609841&w=2, http://www.securityfocus.com/bid/9721, https://exchange.xforce.ibmcloud.com/vulnerabilities/15288
CVE-2004-0183
TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tcpdump
Related CWEs: CWE-125
Related CAPECs: CAPEC-540
References: http://marc.info/?l=bugtraq&m=108067265931525&w=2, http://secunia.com/advisories/11258, http://secunia.com/advisories/11320
CWE: CWE-125
CVE-2004-2663
The (1) SetDebugging and (2) RunEgatherer methods in IBM Access Support eGatherer ActiveX control 2.0.0.16 allow remote attackers to create files with arbitrary content, as demonstrated by creating a .hta file in a Startup folder.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: egatherer
References: http://marc.info/?l=bugtraq&m=108746693619324&w=2, http://marc.info/?l=full-disclosure&m=108741557604568&w=2, http://research.eeye.com/html/advisories/published/AD20040615B.html
CVE-2004-0152
Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: emil
References: http://marc.info/?l=bugtraq&m=108024939827236&w=2, http://www.debian.org/security/2004/dsa-468, https://exchange.xforce.ibmcloud.com/vulnerabilities/15601
CVE-2004-2360
Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with incomplete data, which causes the server to enter an infinite loop while waiting to read the rest of the data that is not sent.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: battle_mages
References: http://aluigi.altervista.org/adv/battlemages-adv.txt, http://cert.uni-stuttgart.de/archive/bugtraq/2004/03/msg00103.html, http://www.securityfocus.com/bid/9849
CVE-2004-1004
Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, midnight_commander, debian_linux, suse_linux, linux
References: http://secunia.com/advisories/13863/, http://www.debian.org/security/2005/dsa-639, http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml
CVE-2004-2380
Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. (dot dot) in the attfile parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: twilight_utilities_web_server
References: http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt, http://www.securitytracker.com/alerts/2004/Mar/1009443.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15523
CVE-2004-0377
Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: perl, activeperl
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019794.html, http://marc.info/?l=bugtraq&m=108118694327979&w=2, http://public.activestate.com/cgi-bin/perlbrowse?patch=22552
CVE-2004-1889
Unknown vulnerability in ftpd in SGI IRIX 6.5.20 through 6.5.23 allows remote attackers to cause a denial of service (hang) via a link failure with Microsoft Windows.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc, http://www.securityfocus.com/bid/10037, https://exchange.xforce.ibmcloud.com/vulnerabilities/15722
CVE-2004-0702
DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bugzilla
References: http://marc.info/?l=bugtraq&m=108965446813639&w=2, http://www.securityfocus.com/bid/10698, https://exchange.xforce.ibmcloud.com/vulnerabilities/16673
CVE-2004-1179
The debstd script in debmake 3.6.x before 3.6.10 and 3.7.x before 3.7.7 allows local users to overwrite arbitrary files via a symlink attack on temporary directories.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: debmake
References: http://secunia.com/advisories/13633/, http://www.debian.org/security/2004/dsa-615, http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-12/0645.html
CVE-2004-0178
The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service (crash) via a sample with an odd number of bytes.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846, http://linux.bkbits.net:8080/linux-2.4/cset%40404ce5967rY2Ryu6Z_uNbYh643wuFA
CVE-2004-0049
Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Affected Products: helix_universal_server, helix_universal_mobile_server
References: http://seclists.org/lists/vulnwatch/2004/Jan-Mar/0057.html, http://service.real.com/help/faq/security/040112_dos/, http://service.real.com/help/faq/security/security022604.html
CVE-2004-1476
Stack-based buffer overflow in the VideoCD (VCD) code in xine-lib 1-rc2 through 1-rc5, as derived from libcdio, allows attackers to execute arbitrary code via a VideoCD with an unterminated disk label.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, xine, xine-lib
References: http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml, http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0, http://www.securityfocus.com/bid/11206
CVE-2004-0794
Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: tnftpd, lukemftp
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-009.txt.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025418.html, http://www.debian.org/security/2004/dsa-551
CVE-2004-2730
Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pspasswd, sysinternals_pstools, psexec, psservice, psinfo
Related CWEs: CWE-264
References: http://secunia.com/advisories/12108, http://securitytracker.com/id?1010737, http://www.osvdb.org/8140
CWE: CWE-264
CVE-2004-1894
TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symlink attack on texutil.log.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: context
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019777.html, http://marc.info/?l=bugtraq&m=108118755923319&w=2, http://securitytracker.com/id?1009661
CVE-2004-0679
The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: unrealircd
References: http://marc.info/?l=bugtraq&m=108904813003166&w=2, http://securityreason.com/securityalert/560, http://www.bandecon.com/advisory/unreal.txt
CVE-2004-2205
Unknown vulnerability in Veritas Cluster Server 1.0.1 through 4.0 allows local users to gain root access via unspecified vectors.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cluster_server
References: http://secunia.com/advisories/12833, http://securitytracker.com/id?1011693, http://seer.support.veritas.com/docs/271040.htm
CVE-2004-0661
Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: di-614\+, di-604, di-624
References: http://marc.info/?l=bugtraq&m=108844250013785&w=2, http://secunia.com/advisories/12018, http://www.osvdb.org/7294
CVE-2004-0213
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000
Related CWEs: CWE-306
Related CAPECs: CAPEC-216, CAPEC-12, CAPEC-36
References: http://marc.info/?l=bugtraq&m=108975382413405&w=2, http://www.kb.cert.org/vuls/id/868580, http://www.us-cert.gov/cas/techalerts/TA04-196A.html
CWE: CWE-306
CVE-2004-0383
Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x
References: http://docs.info.apple.com/article.html?artnum=61798, http://lists.apple.com/mhonarc/security-announce/msg00047.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15768
CVE-2004-2057
SQL injection vulnerability in ASPRunner 2.4 allows remote attackers to execute arbitrary SQL statements.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: asprunner
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html, http://ferruh.mavituna.com/article/?574, http://marc.info/?l=bugtraq&m=109086977330418&w=2
CVE-2004-0258
Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: realplayer, realone_player, realone_enterprise_desktop, realone_desktop_manager
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0027.html, http://marc.info/?l=bugtraq&m=107608748813559&w=2, http://www.ciac.org/ciac/bulletins/o-075.shtml
CVE-2004-2224
Appfoundry Message Foundry 2.75 .0003 allows remote attackers to cause a denial of service (crash) via an HTTP GET request that contains MS-DOS device names such as com1.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: message_foundry
References: http://secunia.com/advisories/11351, http://securitytracker.com/id?1010047, http://www.oliverkarow.de/research/AppFoundryCOM1_Dos.txt
CVE-2004-0478
Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop  that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: mozilla
Related CWEs: CWE-399
References: http://bugzilla.mozilla.org/show_bug.cgi?id=243540, http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/16225
CWE: CWE-399
CVE-2004-2040
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the (1) LAN_407 parameter to clock_menu.php, (2) "email article to a friend" field, (3) "submit news" field, or (4) avmsg parameter to usersettings.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: e107
References: http://marc.info/?l=bugtraq&m=108588043007224&w=2, http://marc.info/?l=full-disclosure&m=108586723116427&w=2, http://secunia.com/advisories/11740
CVE-2004-1548
Directory traversal vulnerability in the file server in ActivePost Standard 3.1 allows remote authenticated users to upload arbitrary files via a .. (dot dot) in the filename.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: activepost_standard
References: http://aluigi.altervista.org/adv/actp-adv.txt, http://marc.info/?l=bugtraq&m=109597139011373&w=2, http://secunia.com/advisories/12642/
CVE-2004-2426
Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a ..  (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: 2110_network_camera, 2401_video_server, 230_mpeg2_video_server, 2400_video_server, 2490_serial_server
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html, http://secunia.com/advisories/12353
CVE-2004-1205
codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pntresmailer
References: http://marc.info/?l=bugtraq&m=110149886306037&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18263, http://marc.info/?l=bugtraq&m=110149886306037&w=2
CVE-2004-1783
Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. (slash dot dot).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: flash_ftp_server
References: http://secunia.com/advisories/10522, http://securitytracker.com/id?1008588, http://www.securiteam.com/windowsntfocus/5FP051FBPQ.html
CVE-2004-0676
Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netfile_ftp_web_server
References: http://marc.info/?l=bugtraq&m=108904874104880&w=2, http://www.haxorcitos.com/Fastream_advisory.txt, http://www.securityfocus.com/bid/10658
CVE-2004-1769
The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cpanel
References: http://marc.info/?l=bugtraq&m=107904890724201&w=2, http://secunia.com/advisories/11111, http://www.kb.cert.org/vuls/id/831534
CVE-2004-1705
Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ux
References: http://marc.info/?l=bugtraq&m=109121546120575&w=2, http://marc.info/?l=bugtraq&m=109146099404071&w=2, http://secunia.com/advisories/12197
CVE-2004-1084
Apache for Apple Mac OS X 10.2.8 and 10.3.6 allows remote attackers to read files and resource fork content via HTTP requests to certain special file names related to multiple data streams in HFS+, which bypass Apache file handles.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: quicktime_streaming_server, darwin_streaming_server, mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
CVE-2004-0768
libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: libpng3
References: http://secunia.com/advisories/33137, http://security.gentoo.org/glsa/glsa-200812-15.xml, http://www.debian.org/security/2004/dsa-536
CVE-2004-1302
The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: yamt
References: http://rpmfind.net/linux/RPM/suse/updates/8.2/i386/rpm/i586/yamt-0.5-1277.i586.html, http://secunia.com/advisories/13554, http://securitytracker.com/id?1012583
CVE-2004-2310
Cross-site scripting (XSS) vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows remote attackers to inject arbitrary web script or HTML via a Domino command in the Quick Console.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: lotus_domino
References: http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt, http://secunia.com/advisories/11143, http://www.osvdb.org/4306
CVE-2004-0379
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: sharepoint_portal_server
References: http://marc.info/?l=bugtraq&m=108118352303273&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/15729, http://marc.info/?l=bugtraq&m=108118352303273&w=2
CVE-2004-1056
Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service (X Server crash) and possibly modify the video output.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: linux_kernel, ubuntu_linux
References: http://secunia.com/advisories/17002, http://www.redhat.com/support/errata/RHSA-2005-092.html, http://www.redhat.com/support/errata/RHSA-2005-529.html
CVE-2004-1560
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sql_server
References: http://marc.info/?l=bugtraq&m=109650760210411&w=2, http://packetstormsecurity.nl/0410-exploits/mssql.7.0.dos.c, http://secunia.com/advisories/12680
CVE-2004-1905
ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to cause a denial of service (crash) by calling the SetSitesFile function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: activescan
References: http://marc.info/?l=bugtraq&m=108130573130482&w=2, http://theinsider.deep-ice.com/texts/advisory53.txt, http://www.securityfocus.com/bid/10067
CVE-2004-0592
The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type, a similar flaw to CVE-2004-0626.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: suse_linux
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023408.html, http://www.novell.com/linux/security/advisories/2004_20_kernel.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/43137
CVE-2004-1477
Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote attackers to execute arbitrary web script or HTML and possibly hijack a user's session.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: jrun
References: http://marc.info/?l=bugtraq&m=109621995623823&w=2, http://secunia.com/advisories/12638/, http://www.kb.cert.org/vuls/id/668206
CVE-2004-2647
Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from the same user.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: free_web_chat
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html, http://marc.info/?l=bugtraq&m=109164397601049&w=2, http://securitytracker.com/alerts/2004/Aug/1010851.html
CVE-2004-1233
Integer overflow in Gadu-Gadu allows remote attackers to cause a denial of service (disk consumption) via a user packet to the DCC file transfer capability with an invalid file length.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=110295777306493&w=2, http://www.man.poznan.pl/~security/gg-adv.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18465
CVE-2004-0721
Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: konqueror
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864, http://marc.info/?l=bugtraq&m=109225538901170&w=2, http://secunia.com/advisories/11978
CVE-2004-1824
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.0 allows remote attackers to inject arbitrary web script or HTML via the what parameter to memberlist.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vbulletin
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0276.html, http://marc.info/?l=bugtraq&m=107945556112453&w=2, http://secunia.com/advisories/11142
CVE-2004-0219
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://marc.info/?l=bugtraq&m=108008530028019&w=2, http://www.kb.cert.org/vuls/id/785945, http://www.openbsd.org/errata.html
CVE-2004-2415
Davenport before 0.9.10 allows attackers to cause a denial of service (resource consumption) via (1) a very large XML file or (2) entity expansion attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: davenport
References: http://secunia.com/advisories/12337, http://securitytracker.com/id?1011030, http://sourceforge.net/mailarchive/forum.php?thread_id=5385243&forum_id=33977
CVE-2004-2706
Unspecified vulnerability in Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service (crash) via conference packets with error messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gyach_enhanced
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.osvdb.org/8938, http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php, http://www.osvdb.org/8938
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-1172
Stack-based buffer overflow in the Agent Browser in Veritas Backup Exec 8.x before 8.60.3878 Hotfix 68, and 9.x before 9.1.4691 Hotfix 40, allows remote attackers to execute arbitrary code via a registration request with a long hostname.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: backup_exec
References: http://secunia.com/advisories/13495/, http://seer.support.veritas.com/docs/273419.htm, http://seer.support.veritas.com/docs/273420.htm
CVE-2004-2319
IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: informix_dynamic_server, informix_extended_parallel_server
References: http://secunia.com/advisories/10737/, http://www-1.ibm.com/support/docview.wss?uid=swg21153336, http://www.osvdb.org/3758
CVE-2004-2178
SQL injection vulnerability in DevoyBB Web Forum 1.0.0 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: devoybb_web_forum
References: http://sourceforge.net/project/shownotes.php?release_id=273104, http://www.maxpatrol.com/advdetails.asp?id=11, http://www.securityfocus.com/bid/11428
CVE-2004-0814
Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, ubuntu_linux
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=131672, http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110, http://marc.info/?l=bugtraq&m=110306397320336&w=2