DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1463
Unknown vulnerability in the PageEditor in MoinMoin 1.2.2 and earlier, related to Access Control Lists (ACL), has unknown impact.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: moinmoin
References: http://sourceforge.net/project/shownotes.php?group_id=8482&release_id=254801, http://www.gentoo.org/security/en/glsa/glsa-200408-25.xml, http://www.osvdb.org/displayvuln.php?osvdb_id=8195
CVE-2004-1296
The (1) eqn2graph and (2) pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: groff
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286371, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286372, http://marc.info/?l=bugtraq&m=110358225615424&w=2
CVE-2004-2306
Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the audit_warn script, which might allow attackers to escape detection.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57483-1, http://www.ciac.org/ciac/bulletins/o-070.shtml, http://www.securityfocus.com/bid/13724
CVE-2004-1498
SQL injection vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary SQL commands via the messageToUserAccNum parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: helm_control_panel
References: http://marc.info/?l=bugtraq&m=109943858026542&w=2, http://secunia.com/advisories/13079, http://www.hat-squad.com/en/000077.html
CVE-2004-2283
Unknown vulnerability in DansGuardian before 2.6.1-13 allows remote attackers to bypass URL filters via a crafted request that causes a page to be added to the clean page cache.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: dansguardian
References: http://dansguardian.org/?page=history, http://www.osvdb.org/5951, http://dansguardian.org/?page=history
CVE-2004-1291
Buffer overflow in qwik-smtpd allows remote attackers to use the server as an SMTP spam relay via a long HELO command, which overwrites the adjacent localIP data buffer.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: qwik_smtpd
References: http://tigger.uic.edu/~jlongs2/holes/qwik-smtpd.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18555, http://tigger.uic.edu/~jlongs2/holes/qwik-smtpd.txt
CVE-2004-2151
Chatman 1.1.1 RC1 and earlier allows remote attackers to cause a denial of service (memory consumption or application crash) via a very large data size.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: chatman
References: http://secunia.com/advisories/12665/, http://securitytracker.com/id?1011431, http://www.osvdb.org/10365
CVE-2004-1654
SQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows remote attackers to execute arbitrary SQL commands via cal_template.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpwebsite
References: http://marc.info/?l=bugtraq&m=109413493005513&w=2, http://secunia.com/advisories/12438, http://www.gulftech.org/?node=research&article_id=00048-08312004
CVE-2004-2143
SQL injection vulnerability in the ReMOSitory Server add-on module to Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the com_remository option.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mambo_portal
References: http://archives.neohapsis.com/archives/bugtraq/2004-09/0215.html, http://archives.neohapsis.com/archives/bugtraq/2004-09/0249.html, http://secunia.com/advisories/12597/
CVE-2004-2410
Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service (null pointer dereference).
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: samhain
References: http://securitytracker.com/id?1012142, http://www.osvdb.org/11594, http://securitytracker.com/id?1012142
CVE-2004-0503
Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: outlook
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0885.html, http://marc.info/?l=bugtraq&m=108483193328605&w=2, http://secunia.com/advisories/11629
CVE-2004-2447
Cross-site scripting (XSS) vulnerability in 1st Class Mail Server 4.01 allows remote attackers to inject arbitrary web script or HTML via the Mailbox parameter to (1) viewmail.tagz, (2) the index script under /user/, (3) members.tagz, (4) general.tagz, (5) advanced.tagz, or (6) list.tagz.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: 1st_class_mail_server
References: http://secunia.com/advisories/11330, http://securitytracker.com/alerts/2004/Apr/1009705.html, http://www.osvdb.org/5012
CVE-2004-0645
Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: community_abiword, wvware
References: http://cpan.cybercomm.nl/pub/gentoo-portage/app-text/wv/files/wv-1.0.0-fix_overflow.patch, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000863, http://security.gentoo.org/glsa/glsa-200407-11.xml
CVE-2004-0632
Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: acrobat, acrobat_reader
References: http://www.adobe.com/support/techdocs/330527.html, http://www.adobe.com/support/techdocs/34222.htm, http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities
CVE-2004-1703
Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag.
CVSS v3.1 Score: 8.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fusion_news
Related CWEs: CWE-352
Related CAPECs: CAPEC-467, CAPEC-111, CAPEC-462
References: http://marc.info/?l=bugtraq&m=109122824523226&w=2, http://securitytracker.com/id?1010829, http://www.securityfocus.com/bid/10836
CWE: CWE-352
CVE-2004-1651
Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Lastname fields during new user registration, or (3) the Schedule Name field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpscheduleit
References: http://archives.neohapsis.com/archives/bugtraq/2004-09/0216.html, http://marc.info/?l=bugtraq&m=109399590602709&w=2, http://securitytracker.com/id?1011127
CVE-2004-1593
Cross-site scripting (XSS) vulnerability in render.UserLayoutRootNode.uP in SCT Campus Pipeline allows remote attackers to inject arbitrary web script or HTML via the utf parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: campus_pipeline
References: http://marc.info/?l=bugtraq&m=109768337007983&w=2, http://secunia.com/advisories/12826, http://www.securityfocus.com/bid/11392
CVE-2004-2298
Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store data if the administrator does not change the credential by using the NMAP Credential Generator.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: internet_messaging_system, netmail
References: http://secunia.com/advisories/13377, http://support.novell.com/cgi-bin/search/searchtid.cgi?/10095545.htm, http://www.osvdb.org/12234
CVE-2004-1065
Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux, ubuntu_linux, openpkg, php
References: http://msgs.securepoint.com/cgi-bin/get/bugtraq0412/157.html, http://www.mandriva.com/security/advisories?name=MDKSA-2004:151, http://www.novell.com/linux/security/advisories/2005_02_php4_mod_php4.html
CVE-2004-2301
Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long "To:" field, possibly due to a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: eudora
References: http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt, http://www.securityfocus.com/bid/10398, https://exchange.xforce.ibmcloud.com/vulnerabilities/16246
CVE-2004-0990
Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, secure_linux, linux, gdlib, openpkg
References: http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html, http://marc.info/?l=bugtraq&m=109882489302099&w=2, http://secunia.com/advisories/18717
CVE-2004-0703
Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://marc.info/?l=bugtraq&m=108965446813639&w=2, http://www.securityfocus.com/bid/10698, https://exchange.xforce.ibmcloud.com/vulnerabilities/16672
CVE-2004-1572
AJ-Fork 167 does not restrict access to directories such as (1) data, (2) inc, (3) plugins, (4) skins, or (5) tools, which allows remote attackers to list files in those directories via a direct HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aj-fork
References: http://echo.or.id/adv/adv07-y3dips-2004.txt, http://marc.info/?l=bugtraq&m=109664986210763&w=2, http://securitytracker.com/id?1011484
CVE-2004-1748
NtRegmon before 6.12 allows local users to cause a denial of service (crash), while NtRegmon is running, via invalid pointers to hook functions such as ZwSetQueryValue.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: regmon
References: http://marc.info/?l=bugtraq&m=109345177124374&w=2, http://www.ngsec.com/docs/advisories/NGSEC-2004-7.txt, http://www.securityfocus.com/bid/11042
CVE-2004-2712
Buffer overflow in Gyach Enhanced (Gyach-E) before 1.0.0-SneakPeek-3 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to "URL data."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gyach_enhanced
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.osvdb.org/8973, http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php, http://www.osvdb.org/8973
CWE: CWE-119
CVE-2004-1641
Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service (crash) via a long FTP command such as (1) CWD, (2) STAT, or (3) LIST.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: titan_ftp_server
References: http://marc.info/?l=bugtraq&m=109396159332523&w=2, http://secunia.com/advisories/12419, http://www.securityfocus.com/bid/11069
CVE-2004-1387
The check_forensic script in apache-utils package 1.3.31 allows local users to overwrite or create arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: http_server
References: http://lists.debian.org/debian-apache/2005/01/msg00076.html, http://secunia.com/advisories/13925, https://exchange.xforce.ibmcloud.com/vulnerabilities/18993
CVE-2004-2528
Cross-site scripting (XSS) vulnerability in sresult.exe in Webcam Watchdog 4.0.1a allows remote attackers to inject arbitrary web script or HTML via the cam parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webcam_watchdog
References: http://members.lycos.co.uk/r34ct/main/Webcam_watchdog_401a.txt, http://secunia.com/advisories/12199, http://securitytracker.com/id?1010824
CVE-2004-0127
Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgedview
References: http://secunia.com/advisories/10753/, http://www.osvdb.org/displayvuln.php?osvdb_id=3768, http://www.securityfocus.com/archive/1/352355
CVE-2004-2675
ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to cause a denial of service (crash) via a SITE PASS command with a long password parameter, which causes the database to be corrupted.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Affected Products: ftp_server
References: http://secunia.com/advisories/11002, http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx, http://www.osvdb.org/11332
CVE-2004-0173
Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" (dot dot encoded backslash) sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://issues.apache.org/bugzilla/show_bug.cgi?id=26152, http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017740.html, http://marc.info/?l=bugtraq&m=107765545431387&w=2
CVE-2004-2679
Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Exchange (IKE) with a certain Vendor ID payload that causes Firewall-1 to return a response containing version and other information.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Affected Products: firewall-1
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0477.html, http://www.nta-monitor.com/news/checkpoint2004/index.htm, http://www.securityfocus.com/bid/10558
CVE-2004-1610
SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary files and execute code via the (1) vMME.AttachmentPath or (2) vMME.LibraryPath variables.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: saleslogix
References: http://marc.info/?l=bugtraq&m=109811852218478&w=2, http://marc.info/?l=bugtraq&m=109811852218478&w=2
CVE-2004-1077
Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and MetaFrame Presentation Server client for WinCE before 8.33 allows remote servers to create arbitrary shortcuts on the client via a full UNC path in the AppInStartmenu directive.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: program_neighborhood_agent, metaframe_client
References: http://secunia.com/advisories/15108, http://support.citrix.com/kb/entry.jspa?externalID=CTX105650, http://www.idefense.com/application/poi/display?id=237&type=vulnerabilities
CVE-2004-1449
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7 allows remote attackers to determine the location of files on a user's hard drive by obscuring a file upload control and tricking the user into dragging text into that control.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: firebird, mozilla, thunderbird
References: http://bugzilla.mozilla.org/show_bug.cgi?id=206859#c0, http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:082, http://bugzilla.mozilla.org/show_bug.cgi?id=206859#c0
CVE-2004-1058
Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel, ubuntu_linux
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U, http://lists.suse.de/archive/suse-security-announce/2006-Feb/0010.html, http://secunia.com/advisories/18684
CVE-2004-1992
Buffer overflow in Serv-U FTP server before 5.0.0.6 allows remote attackers to cause a denial of service (crash) via a long -l parameter, which triggers an out-of-bounds read.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: serv-u_file_server
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=108360377119290&w=2, http://marc.info/?l=ntbugtraq&m=108359620108234&w=2, http://secunia.com/advisories/11430
CWE: CWE-119
CVE-2004-2028
Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: e107
References: http://marc.info/?l=bugtraq&m=108515632622796&w=2, http://secunia.com/advisories/11693, http://www.osvdb.org/6345
CVE-2004-0298
CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cesarftp
References: http://marc.info/?l=bugtraq&m=107712057628250&w=2, http://www.securityfocus.com/bid/9666, https://exchange.xforce.ibmcloud.com/vulnerabilities/15252
CVE-2004-2682
PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining factors using timing differences on (1) the number of extra reductions during Montgomery reduction, and (2) the use of different integer multiplication algorithms ("Karatsuba" and normal), a related issue to CVE-2003-0147.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Products: matrixssl
References: http://www.matrixssl.org/archives/000075.html, http://www.matrixssl.org/archives/000075.html
CVE-2004-0579
Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: super, debian_linux
References: http://www.debian.org/security/2004/dsa-522, https://exchange.xforce.ibmcloud.com/vulnerabilities/16458, http://www.debian.org/security/2004/dsa-522
CVE-2004-2516
Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: myserver
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0052.html, http://secunia.com/advisories/12561, http://securitytracker.com/id?1011278
CVE-2004-0200
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: greetings, visual_c\+\+, excel, digital_image_suite, powerpoint
References: http://marc.info/?l=bugtraq&m=109524346729948&w=2, http://www.kb.cert.org/vuls/id/297462, http://www.us-cert.gov/cas/techalerts/TA04-260A.html
CVE-2004-1786
PortalApp places user credentials under the web root with insufficient access control, which allows remote attackers to gain access to sensitive information via a direct request to 8275.mdb.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: portalapp
References: http://securitytracker.com/id?1008627, http://www.securityfocus.com/bid/9354, https://exchange.xforce.ibmcloud.com/vulnerabilities/14169
CVE-2004-1723
The (1) updateuser.php and (2) forums_prune.php scripts in PHP-Fusion 4.00 allow remote attackers to obtain sensitive information via a direct HTTP request, which reveals the installation path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php_fusion
References: http://marc.info/?l=bugtraq&m=109285292901685&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17036, http://marc.info/?l=bugtraq&m=109285292901685&w=2
CVE-2004-1258
Buffer overflow in the put_words function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: abcm2ps
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://tigger.uic.edu/~jlongs2/holes/abcm2ps.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18579, http://tigger.uic.edu/~jlongs2/holes/abcm2ps.txt
CWE: CWE-119
CVE-2004-1310
Stack-based buffer overflow in the asf_mmst_streaming.c functionality for MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a large MMST stream packet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mplayer
References: http://www.idefense.com/application/poi/display?id=167, http://www.mandriva.com/security/advisories?name=MDKSA-2004:157, http://www1.mplayerhq.hu/MPlayer/patches/mmst_fix_20041215.diff
CVE-2004-1313
The Smc.exe process in My Firewall Plus 5.0 build 1117, and possibly other versions, does not drop privileges before invoking help, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: my_firewall_plus
References: http://secunia.com/secunia_research/2004-16/, https://exchange.xforce.ibmcloud.com/vulnerabilities/18622, http://secunia.com/secunia_research/2004-16/
CVE-2004-0006
Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim, ultramagnetic
References: ftp://patches.sgi.com/support/free/security/advisories/20040201-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040202-01-U.asc, http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html
CVE-2004-0571
Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt, windows_me, windows_98se, windows_98
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-041, https://exchange.xforce.ibmcloud.com/vulnerabilities/18337, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1168
CVE-2004-1708
Webbsyte Chat 0.9.0 allows remote attackers to cause a denial of service (crash) via a large number of connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webbsyte_chat
References: http://marc.info/?l=bugtraq&m=109156450320855&w=2, http://www.securityfocus.com/bid/10842, https://exchange.xforce.ibmcloud.com/vulnerabilities/16852
CVE-2004-1509
validate.php in WebCalendar allows remote attackers to gain sensitive information via an invalid encoded_login parameter, which reveals the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webcalendar
References: http://marc.info/?l=bugtraq&m=110011618724455&w=2, http://secunia.com/advisories/13164, http://www.securityfocus.com/bid/11651
CVE-2004-2317
Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mbedthis_appweb_http_server
References: http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html, http://www.securityfocus.com/bid/10673, http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html
CVE-2004-1702
The AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 does not properly check the return value of the ReceiveTransaction function, which leads to a failed malloc call and triggers to a null dereference, which allows remote attackers to cause a denial of service (crash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cfengine
References: http://marc.info/?l=bugtraq&m=109208394910086&w=2, http://secunia.com/advisories/12251, http://security.gentoo.org/glsa/glsa-200408-08.xml
CVE-2004-1421
Multiple PHP remote file inclusion vulnerabilities (1) step_one.php, (2) step_one_tables.php, (3) step_two_tables.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to execute arbitrary PHP code by modifying the server_inc parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: whm_autopilot
References: http://marc.info/?l=bugtraq&m=110425620105529&w=2, http://marc.info/?l=bugtraq&m=110451997904494&w=2, http://secunia.com/advisories/13673
CVE-2004-2228
Mozilla Firefox before 1.0 is installed with world-writable permissions on Mac OS X, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: firefox
References: http://secunia.com/advisories/13144, http://secunia.com/advisories/13724, http://security.gentoo.org/glsa/glsa-200501-03.xml
CVE-2004-0829
smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: samba
References: http://samba.org/samba/history/samba-2.2.11.html, http://seclists.org/lists/bugtraq/2004/Sep/0003.html, http://www.gentoo.org/security/en/glsa/glsa-200409-14.xml
CVE-2004-0172
Heap-based buffer overflow in the search_for_command function of ltrace 0.3.10, if it is installed setuid, could allow local users to execute arbitrary code via a long filename.  NOTE: It is unclear whether there are any packages that install ltrace as a setuid program, so this candidate might be REJECTed.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ltrace
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011600.html, http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011610.html, http://securitytracker.com/id?1007896
CVE-2004-1598
Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave (swf) file that references files outside of the temporary directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: acrobat, acrobat_reader
References: http://marc.info/?l=bugtraq&m=109771686326956&w=2, http://marc.info/?l=bugtraq&m=109779541602447&w=2, http://marc.info/?l=bugtraq&m=109812210520520&w=2
CVE-2004-0402
Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xpcd, mandrake_linux
References: http://www.debian.org/security/2004/dsa-508, http://www.mandriva.com/security/advisories?name=MDKSA-2004:053, http://www.securityfocus.com/bid/10403
CVE-2004-0559
The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mandrake_linux_corporate_server, usermin, webmin, mandrake_linux
References: http://secunia.com/advisories/12488/, http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml, http://www.securityfocus.com/bid/11153
CVE-2004-0561
Format string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gopherd
References: http://secunia.com/advisories/13855, http://www.debian.org/security/2004/dsa-638, http://secunia.com/advisories/13855
CVE-2004-2578
phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpgroupware
References: http://web.archive.org/web/20040920024328/http://www.phpgroupware.org/, http://www.osvdb.org/8354, http://www.securityfocus.com/bid/10895
CVE-2004-1321
The configuration backup in Asante FM2008 running firmware 1.06 stores the username and password in cleartext, which could allow remote attackers to gain unauthorized access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fm2008_managed_ethernet_switch
References: http://marc.info/?l=bugtraq&m=110312733624864&w=2, http://marc.info/?l=bugtraq&m=110312733624864&w=2
CVE-2004-1959
blocker_query.php in Protector System 1.15b1 for PHP-Nuke allows remote attackers to gain sensitive information via a string in the portNum parameter, which reveals the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: protector_system
References: http://marc.info/?l=bugtraq&m=108276299810121&w=2, http://protector.warcenter.se/article-53--0-0.html, http://www.securityfocus.com/bid/10206
CVE-2004-1526
Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, including the administrator.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hired_team_trial
References: http://marc.info/?l=bugtraq&m=110054260919742&w=2, http://secunia.com/advisories/13207, http://marc.info/?l=bugtraq&m=110054260919742&w=2
CVE-2004-1971
modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: video_gallery
References: http://marc.info/?l=bugtraq&m=108308660628557&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/15978, http://marc.info/?l=bugtraq&m=108308660628557&w=2
CVE-2004-0647
shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shorewall
References: http://lists.shorewall.net/pipermail/shorewall-announce/2004-June/000385.html, http://www.gentoo.org/security/en/glsa/glsa-200407-07.xml, http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:080
CVE-2004-1362
The PL/SQL module for the Oracle HTTP Server in Oracle Application Server 10g, when using the WE8ISO8859P1 character set, does not perform character conversions properly, which allows remote attackers to bypass access restrictions for certain procedures via an encoded URL with "%FF" encoded sequences that are improperly converted to "Y" characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, oracle10g, oracle8i
References: http://marc.info/?l=bugtraq&m=110382306006205&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.kb.cert.org/vuls/id/435974
CVE-2004-1977
3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service (crash) via a Nessus scan in safeChecks mode.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: webbngss3nbxnts
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0092.html, http://marc.info/?l=bugtraq&m=108334887408554&w=2, http://secunia.com/advisories/11504
CVE-2004-2239
Buffer overflow in vsybase.c in vpopmail 5.4.2 and earlier might allow attackers to cause a denial of service or execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vpopmail_\(vchkpw\)
References: http://archives.neohapsis.com/archives/bugtraq/2004-08/0226.html, http://archives.neohapsis.com/archives/bugtraq/2004-08/0264.html, http://archives.neohapsis.com/archives/bugtraq/2004-08/0286.html
CVE-2004-0914
Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, linux, x11r6, fedora_core, lesstif
References: http://rhn.redhat.com/errata/RHSA-2004-537.html, http://secunia.com/advisories/13224/, http://www.debian.org/security/2004/dsa-607
CVE-2004-1974
paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pafiledb
References: http://marc.info/?l=bugtraq&m=108311096022485&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/15990, http://marc.info/?l=bugtraq&m=108311096022485&w=2
CVE-2004-0626
The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, suse_linux, linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852, http://lwn.net/Articles/91964/, http://marc.info/?l=bugtraq&m=108861141304495&w=2
CVE-2004-2490
Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: informix_dynamic_server, informix_extended_parallel_server
References: http://marc.info/?l=bugtraq&m=107524391217364&w=2, http://secunia.com/advisories/10737, http://www-1.ibm.com/support/docview.wss?uid=swg21153336
CVE-2004-0220
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=108008530028019&w=2, http://www.kb.cert.org/vuls/id/223273, http://www.openbsd.org/errata.html
CWE: CWE-119
CVE-2004-2033
Orenosv 0.5.9f allows remote attackers to cause a denial of service (crash) via a long HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: orenosv_http_ftp_server
References: http://hp.vector.co.jp/authors/VA027031/orenosv/index_en.html, http://marc.info/?l=bugtraq&m=108559623703422&w=2, http://secunia.com/advisories/11706
CVE-2004-2339
Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments.  Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed
CVSS v3.1 Score: 8.4 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_xp, windows_2003_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0529.html, http://archives.neohapsis.com/archives/bugtraq/2004-02/0530.html, http://www.securityfocus.com/archive/1/354392
CVE-2004-2689
NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the "autorized=admin; root=admin" value.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: newsphp
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2004-04/0161.html, http://secunia.com/advisories/11346, http://securitytracker.com/alerts/2004/Apr/1009740.html
CWE: CWE-264
CVE-2004-1301
Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitrary code via a crafted Excel (XLS) file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xlreader
References: http://tigger.uic.edu/~jlongs2/holes/xlreader.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18612, http://tigger.uic.edu/~jlongs2/holes/xlreader.txt
CVE-2004-0131
The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: radius
References: http://ftp.gnu.org/gnu/radius/radius-1.2.tar.gz, http://secunia.com/advisories/10799, http://www.idefense.com/application/poi/display?id=71&type=vulnerabilities&flashstatus=true
CVE-2004-0005
Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be written beyond the buffer, (2) octal encoding in yahoo_decode that causes a pointer to reference memory beyond the terminating null byte, (3) a quoted printable string to the gaim_quotedp_decode MIME decoder that causes a null byte to be written beyond the buffer, and (4) quoted printable encoding in gaim_quotedp_decode that causes a pointer to reference memory beyond the terminating null byte.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim
Related CWEs: CWE-193
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0994.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000813, http://marc.info/?l=bugtraq&m=107513690306318&w=2
CWE: CWE-193
CVE-2004-2618
Cross-site scripting (XSS) vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to inject arbitrary web script or HTML via the URI, directly after the initial '/' (slash).
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: pegasi_web_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0109.html, http://archives.neohapsis.com/archives/bugtraq/2004-03/0136.html, http://secunia.com/advisories/11122
CVE-2004-1745
Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: painkiller
References: http://marc.info/?l=bugtraq&m=109339761608821&w=2, http://secunia.com/advisories/12367, http://www.securityfocus.com/bid/11029
CVE-2004-1349
gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: solaris, gzip
Related CWEs: CWE-269
Related CAPECs: CAPEC-122, CAPEC-233, CAPEC-58
MITRE ATT&CK Techniques: T1548
References: http://secunia.com/advisories/12744, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57600-1&searchclause=security, http://www.kb.cert.org/vuls/id/635998
CWE: CWE-269
MITRE ATT&CK techniques: T1548
CVE-2004-0093
XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: x11r6
References: ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000824, http://www.debian.org/security/2004/dsa-443
CVE-2004-1872
Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webct
References: http://marc.info/?l=bugtraq&m=108057915916365&w=2, http://secunia.com/advisories/11242, http://www.securityfocus.com/bid/9999
CVE-2004-2084
Cross-site scripting (XSS) vulnerability in search.php in JShop E-Commerce Server allows remote attackers to inject arbitrary web script or HTML via the xSearch parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: jshop_server, jshop_professional
References: http://secunia.com/advisories/10825, http://securitytracker.com/id?1008988, http://www.osvdb.org/3889
CVE-2004-0823
OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x, openldap
References: http://secunia.com/advisories/12491/, http://secunia.com/advisories/17233, http://secunia.com/advisories/21520
CVE-2004-1540
ZyXEL Prestige 623, 650, and 652 HW Routers, and possibly other versions, with HTTP Remote Administration enabled, does not require a password to access rpFWUpload.html, which allows remote attackers to reset the router configuration file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: zynos, prestige
References: http://marc.info/?l=bugtraq&m=110116413414615&w=2, http://marc.info/?l=bugtraq&m=110135136811344&w=2, http://secunia.com/advisories/13278
CVE-2004-0065
Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2) placelist.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgedview
References: http://marc.info/?l=bugtraq&m=107394912715478&w=2, http://www.securityfocus.com/bid/11910, http://www.securityfocus.com/bid/11925
CVE-2004-0675
Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: cart32
References: http://drponidi.5u.com/advisory.htm, http://marc.info/?l=bugtraq&m=108887778628398&w=2, http://www.securityfocus.com/bid/10617
CVE-2004-0324
Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: confirm
References: http://marc.info/?l=bugtraq&m=107757320401858&w=2, http://www.securityfocus.com/bid/9728, https://exchange.xforce.ibmcloud.com/vulnerabilities/15290
CVE-2004-2755
Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: web_security
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://secunia.com/advisories/10618, http://securityresponse.symantec.com/avcenter/security/Content/2004.01.13.html, http://www.osvdb.org/6754
CWE: CWE-79