DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0600
Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: samba, secure_linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854, http://marc.info/?l=bugtraq&m=109051340810458&w=2
CVE-2004-0097
Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pwlib
References: http://www.cert.org/advisories/CA-2004-01.html, http://www.debian.org/security/2004/dsa-448, http://www.kb.cert.org/vuls/id/749342
CVE-2004-0417
Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: propack, linux, openbsd, cvs, openpkg
References: ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html, http://marc.info/?l=bugtraq&m=108716553923643&w=2
CVE-2004-1422
WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: whm_autopilot
References: http://marc.info/?l=bugtraq&m=110425620105529&w=2, http://marc.info/?l=bugtraq&m=110451997904494&w=2, http://secunia.com/advisories/13673
CVE-2004-0729
PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.php, (2) faq parameter to faq.php, or (3) ranksrow parameter to profile.php, which reveal the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=108999024506020&w=2, http://www.waraxe.us/index.php?modname=sa&id=34, https://exchange.xforce.ibmcloud.com/vulnerabilities/16716
CVE-2004-0897
The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_xp, windows_2003_server
References: http://secunia.com/advisories/13802, http://securitytracker.com/id?1012833, http://www.ciac.org/ciac/bulletins/p-095.shtml
CVE-2004-0236
SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: thephototool
References: http://marc.info/?l=bugtraq&m=107576894019530&w=2, http://securitytracker.com/alerts/2004/Feb/1008906.html, http://www.osvdb.org/6727
CVE-2004-0822
Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x_server, mac_os_x
References: http://secunia.com/advisories/12491/, http://www.ciac.org/ciac/bulletins/o-212.shtml, http://www.kb.cert.org/vuls/id/545446
CVE-2004-2263
SQL injection vulnerability in the valid function in fr_left.php in PlaySMS 0.7 and earlier allows remote attackers to modify SQL statements via the vc2 cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: playsms
References: http://securitytracker.com/id?1010984, http://sourceforge.net/project/shownotes.php?release_id=254915, http://www.osvdb.org/8984
CVE-2004-0667
Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, which could allow local users to gain elevated privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rule_set_based_access_control, linux
References: http://marc.info/?l=bugtraq&m=108861182906067&w=2, http://marc.info/?l=bugtraq&m=108879977120430&w=2, http://www.rsbac.org/download/bugfixes/
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: propack, edirectory, s8500, pix_firewall, openssl
Related CWEs: CWE-476
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:05.openssl.asc, ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-005.txt.asc, ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.10/SCOSA-2004.10.txt
CWE: CWE-476
CVE-2004-2449
Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service (application crash) via a long, malformed UDP datagram.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: roger_wilco_graphical_server, roger_wilco_dedicated_server
References: http://aluigi.altervista.org/adv/wilco-again-adv.txt, http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html, http://secunia.com/advisories/11270
CVE-2004-2295
SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html, http://secunia.com/advisories/11852, http://www.osvdb.org/7000
CVE-2004-2661
Soft3304 04WebServer before 1.41 does not properly check file names, which allows remote attackers to obtain sensitive information (CGI source code).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 04webserver
References: http://www.soft3304.net/04WebServer/Security.html, http://www.soft3304.net/04WebServer/Security.html
CVE-2004-0662
PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php or (2) modules.php, which reveals the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: powerportal
References: http://marc.info/?l=bugtraq&m=108844362627811&w=2, http://www.securityfocus.com/bid/10622, http://www.swp-zone.org/archivos/advisory-07.txt
CVE-2004-1224
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mtr
References: http://marc.info/?l=bugtraq&m=110279034910663&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18428, http://marc.info/?l=bugtraq&m=110279034910663&w=2
CVE-2004-2382
The PerfectNav plugin for Microsoft Internet Explorer allows remote attackers to cause a denial of service (browser crash) via a malformed URL such as "?".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: perfectnav
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017830.html, http://securetarget.net/advisory.htm, http://securitytracker.com/id?1009218
CVE-2004-2522
Cross-site scripting (XSS) vulnerability in web.tmpl in Gattaca Server 2003 1.1.10.0 allows remote attackers to inject arbitrary web script or HTML via the (1) template or (2) language parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: gattaca_server_2003
References: http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt, http://secunia.com/advisories/12071, http://securitytracker.com/id?1010703
CVE-2004-1457
The Virtual Private Network (VPN) capability in Novell Bordermanager 3.8 allows remote attackers to cause a denial of service (ABEND in IKE.NLM) via a malformed IKE packet, as sent by the Striker ISAKMP Protocol Test Suite.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bordermanager
References: http://secunia.com/advisories/12067/, http://support.novell.com/cgi-bin/search/searchtid.cgi?/10093576.htm, http://www.kb.cert.org/vuls/id/432097
CVE-2004-2075
Sophos Anti-Virus 3.78 allows remote attackers to cause a denial of service (infinite loop) via a MIME header that is not properly terminated.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sophos_anti-virus
References: http://secunia.com/advisories/10855, http://securitytracker.com/id?1009042, http://www.osvdb.org/3925
CVE-2004-1742
Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in the viewcat parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webapp
References: http://cornerstone.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=updates&id=1, http://marc.info/?l=bugtraq&m=109336268002879&w=2, http://secunia.com/advisories/12373
CVE-2004-2000
SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL via the (1) orderby or (2) sid parameters to modules.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108378804809891&w=2, http://osvdb.org/52223, http://secunia.com/advisories/11553
CVE-2004-1657
Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: dasblog
References: http://marc.info/?l=bugtraq&m=109443321830050&w=2, http://secunia.com/advisories/12416, http://staff.newtelligence.net/clemensv/PermaLink.aspx?guid=69bce168-cb09-4f09-8d53-f0b97f11b198
CVE-2004-1173
Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTML (DHTML) Editing Component (DEC) and Javascript that calls showModalDialog.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=110271114525795&w=2, http://marc.info/?l=ntbugtraq&m=110271016129952&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18444
CVE-2004-0913
Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ecartis
References: http://secunia.com/advisories/12918/, http://www.auscert.org.au/render.html?it=4491, http://www.debian.org/security/2004/dsa-572
CVE-2004-2269
Stack-based buffer overflow in pads.c in Passive Asset Detection System (Pads) might allow local users to execute arbitrary code via a long report file name argument. NOTE: since Pads is not normally installed setuid, this may not be a vulnerability.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: pads
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0834.html, http://www.osvdb.org/9067, https://exchange.xforce.ibmcloud.com/vulnerabilities/17038
CVE-2004-2452
Unknown vulnerability in Hitachi Cosminexus Portal Framework 01-00, 01-01, 01-02, 02-01, 02-02, 02-03, and other versions allows remote attackers to obtain sensitive information in the <ut:cache> tag library.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cosminexus_portal_framework
References: http://secunia.com/advisories/12463, http://securitytracker.com/id?1011171, http://www.hitachi-support.com/security_e/vuls_e/HS04-006_e/01-e.html
CVE-2004-0114
The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's reference count when the vm_map_find function fails, which could allow local users to gain read or write access to a portion of kernel memory and gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netbsd, openbsd, freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:02.shmat.asc, ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-004.txt.asc, http://marc.info/?l=bugtraq&m=107608375207601&w=2
CVE-2004-1618
Vypress Tonecast 1.3 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed mp2 stream.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tonecast
References: http://aluigi.altervista.org/adv/toneboom-adv.txt, http://marc.info/?l=bugtraq&m=109820344806472&w=2, http://secunia.com/advisories/12890
CVE-2004-0622
Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x
References: http://citp.princeton.edu/pub/coldboot.pdf, http://marc.info/?l=bugtraq&m=108819559925981&w=2, http://www.securityfocus.com/archive/1/488930/100/100/threaded
CVE-2004-2440
Unspecified vulnerability in cmdline.c in proxytunnel 1.1.3 and earlier allows local users to obtain proxy credentials (username or password) of other users.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: proxytunnel
References: http://secunia.com/advisories/12685/, http://securitytracker.com/id?1011486, http://sourceforge.net/project/shownotes.php?release_id=271699
CVE-2004-0634
The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, ethereal, mandrake_linux, linux, linux_advanced_workstation
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916, http://secunia.com/advisories/12024
CVE-2004-2724
LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null character.
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Affected Products: chat_anywhere
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1183.html, http://secunia.com/advisories/12398, http://securitytracker.com/id?1011080
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2004-1194
Buffer overflow in Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a long nickname.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: star_wars_battlefront
References: http://marc.info/?l=bugtraq&m=110132227932050&w=2, http://www.securityfocus.com/bid/11750, https://exchange.xforce.ibmcloud.com/vulnerabilities/18256
CVE-2004-1314
Safari 1.x allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability, a different vulnerability than CVE-2004-1122.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: safari
References: http://lists.apple.com/archives/security-announce/2005/Jan/msg00001.html, http://secunia.com/advisories/13252/, http://secunia.com/multiple_browsers_window_injection_vulnerability_test/
CVE-2004-1305
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: media_communication_server_5200, ip_softphone_2050, periphonics, windows_me, symposium_call_center_server
References: http://marc.info/?l=bugtraq&m=110382854111833&w=2, http://www.kb.cert.org/vuls/id/177584, http://www.kb.cert.org/vuls/id/697136
CVE-2004-1918
RSniff 1.0 allows remote attackers to cause a denial of service (connection exhaustion) via a large number of connections with a command other than AUTHENTICATE, or without any data, which prevents the socket from being closed properly.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: rsniff
References: http://aluigi.altervista.org/adv/rsniff-adv.txt, http://marc.info/?l=bugtraq&m=108152508004665&w=2, http://secunia.com/advisories/11339
CVE-2004-0589
Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://www.cisco.com/warp/public/707/cisco-sa-20040616-bgp.shtml, http://www.kb.cert.org/vuls/id/784540, https://exchange.xforce.ibmcloud.com/vulnerabilities/16427
CVE-2004-0591
Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: sqwebmail
References: http://marc.info/?l=bugtraq&m=108786212220140&w=2, http://secunia.com/advisories/11918/, http://www.debian.org/security/2004/dsa-533
CVE-2004-2454
aMSN 0.90 for Microsoft Windows allows local users to obtain sensitive information such as hashed passwords from (1) hotlog.htm and (2) config.xml.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: amsn
References: http://securitytracker.com/id?1010555, http://sourceforge.net/tracker/index.php?func=detail&aid=976450&group_id=54091&atid=472655, http://www.osvdb.org/8123
CVE-2004-0520
Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: propack, squirrelmail, open_webmail
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858, http://marc.info/?l=bugtraq&m=108611554415078&w=2
CVE-2004-1835
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sort_key, (4) order_key, (5) user, or (6) album parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: invision_gallery
References: http://marc.info/?l=bugtraq&m=107997906500032&w=2, http://secunia.com/advisories/11194, http://securitytracker.com/id?1009512
CVE-2004-0936
RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, etrust_ez_armor, etrust_intrusion_detection, rav_antivirus_desktop, brightstor_arcserve_backup
References: http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true, http://www.kb.cert.org/vuls/id/968818, http://www.securityfocus.com/bid/11448
CVE-2004-1711
Cross-site scripting (XSS) vulnerability in post.php in Moodle before 1.3 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: moodle
References: http://marc.info/?l=bugtraq&m=109182851216921&w=2, http://secunia.com/advisories/12262, http://www.securityfocus.com/bid/10884
CVE-2004-2085
Multiple cross-site scripting (XSS) vulnerabilities in Brad Fears phpCodeCabinet 0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via multiple parameters, including (1) the sid parameter to comments.php, (2) the cid, cf, or rfd parameters to category.php, or the cid parameter to (3) input.php, (4) browse.php, (5) themes/facade/header.php, or (6) themes/phpcc/header.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpcodecabinet
References: http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/browse.php?r1=1.5&r2=1.6, http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/category.php?r1=1.4&r2=1.5, http://cvs.sourceforge.net/viewcvs.py/phpcodecabinet/phpcc/comments.php?r1=1.1&r2=1.2
CVE-2004-1663
Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and possible data corruption) via crafted TCP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ds4100, silkworm_fiber_channel_switch, storage_controller, fabric_operating_system, d280
References: http://marc.info/?l=bugtraq&m=109435831811484&w=2, http://secunia.com/advisories/12464, http://www.securityfocus.com/bid/11108
CVE-2004-1429
ArGoSoft FTP 1.4.2.4 and earlier does not limit the number of times that a bad password can be entered, which makes it easier for remote attackers to guess passwords via a brute force attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ftp_server
References: http://marc.info/?l=bugtraq&m=110451582011666&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18722, http://marc.info/?l=bugtraq&m=110451582011666&w=2
CVE-2004-1094
Buffer overflow in InnerMedia DynaZip DUNZIP32.dll file version 5.00.03 and earlier allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, as demonstrated using (1) a .rjs (skin) file in RealPlayer 10 through RealPlayer 10.5 (6.0.12.1053), RealOne Player 1 and 2, (2) the Restore Backup function in CheckMark Software Payroll 2004/2005 3.9.6 and earlier, (3) CheckMark MultiLedger before 7.0.2, (4) dtSearch 6.x and 7.x, (5) mcupdmgr.exe and mghtml.exe in McAfee VirusScan 10 Build 10.0.21 and earlier, (6) IBM Lotus Notes before 6.5.5, and other products.  NOTE: it is unclear whether this is the same vulnerability as CVE-2004-0575, although the data manipulations are the same.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: multiledger, realplayer, realone_player, checkmark_payroll, dynazip_library
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/1044.html, http://marc.info/?l=bugtraq&m=109894226007607&w=2, http://secunia.com/advisories/17096
CVE-2004-2613
Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer development branch for the 2.4 kernel before 1.3.5 has unspecified impact and attack vectors, related to "write access to specific proc entries from a vserver context", a different vulnerability than CVE-2004-2408.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux-vserver
References: http://linux-vserver.org/ChangeLog, http://list.linux-vserver.org/archive/vserver/msg05824.html, http://www.osvdb.org/7586
CVE-2004-1710
page.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the url parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: page_cgi
References: http://marc.info/?l=bugtraq&m=109181771832634&w=2, http://www.osvdb.org/8936, https://exchange.xforce.ibmcloud.com/vulnerabilities/19713
CVE-2004-1345
Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: storedge_3510_fc_array, enterprise_storage_manager, storedge_3310_scsi_array
References: http://secunia.com/advisories/11935/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57581-1&searchclause=security, http://www.ciac.org/ciac/bulletins/o-166.shtml
CVE-2004-0393
Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rlpr
References: http://marc.info/?l=bugtraq&m=108810992313652&w=2, http://www.debian.org/security/2004/dsa-524, http://www.securityfocus.com/bid/10578
CVE-2004-1163
Cisco CNS Network Registrar Central Configuration Management (CCM) server 6.0 through 6.1.1.3 allows remote attackers to cause a denial of service (CPU consumption) by ending a connection after sending a certain sequence of packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: cns_network_registrar
References: http://www.cisco.com/en/US/products/products_security_advisory09186a008036786d.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/18327, http://www.cisco.com/en/US/products/products_security_advisory09186a008036786d.shtml
CVE-2004-2619
ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ripmime
References: http://secunia.com/advisories/12201, http://www.osvdb.org/8287, http://www.pldaniels.com/ripmime/CHANGELOG
CVE-2004-2421
Unknown vulnerability in Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7, when running on HP-UX in trusted mode, allows attackers to bypass authentication and gain administrator rights.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: jp1_p-1b41-9471, jp1_p-1j41-9471, jp1_p-1b41-9461
References: http://secunia.com/advisories/12050, http://securitytracker.com/id?1011023, http://www.hitachi-support.com/security_e/vuls_e/HS04-004_e/index-e.html
CVE-2004-0234
Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: f-secure_personal_express, f-secure_for_firewalls, f-secure_internet_security, mailsweeper, f-secure_anti-virus
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2006-04/0059.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000840, http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020776.html
CWE: CWE-119
CVE-2004-1792
swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote attackers to cause a denial of service (infinite loop) via a long packet with two CRLF sequences to the service management port (TCP 8000).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: switch_off
References: http://secunia.com/advisories/10521, http://securitytracker.com/id?1008581, http://www.elitehaven.net/switchoff.txt
CVE-2004-1139
Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, propack, debian_linux, suse_linux, ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916, http://secunia.com/advisories/13468/, http://www.ciac.org/ciac/bulletins/p-061.shtml
CVE-2004-2614
Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: myweb
References: http://fux0r.phathookups.com/advisory/sp-x11-advisory.txt, http://secunia.com/advisories/11566, http://security-protocols.com/modules.php?name=News&file=article&sid=1931
CVE-2004-1722
SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the schedule parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mail_server
References: http://marc.info/?l=bugtraq&m=109279057326044&w=2, http://packetstormsecurity.nl/0408-exploits/merak527.txt, http://secunia.com/advisories/12269
CVE-2004-2763
The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Products: one_web_server, iplanet_web_server
Related CWEs: CWE-16
References: http://archive.cert.uni-stuttgart.de/uniras/2004/02/msg00007.html, http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf, http://www.kb.cert.org/vuls/id/867593
CWE: CWE-16
CVE-2004-1558
Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ypops
References: http://dbeusee.home.comcast.net/history.html, http://marc.info/?l=bugtraq&m=109630699829536&w=2, http://secunia.com/advisories/12660
CVE-2004-2213
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to obtain the source code for scripts via a (1) trailing dot (".") or (2) trailing space in an HTTP request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mbedthis_appweb_http_server
References: http://secunia.com/advisories/12011, http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html, http://www.osvdb.org/7390
CVE-2004-0161
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ripmime, mailsweeper, internet_gatekeeper
References: http://marc.info/?l=bugtraq&m=109524928232568&w=2, http://www.uniras.gov.uk/vuls/2004/380375/mime.htm, https://exchange.xforce.ibmcloud.com/vulnerabilities/9274
CVE-2004-1614
Mozilla allows remote attackers to cause a denial of service (application crash from invalid memory access) via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mozilla
References: http://lcamtuf.coredump.cx/mangleme/gallery/, http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html, http://marc.info/?l=bugtraq&m=109811406620511&w=2
CVE-2004-2498
Unspecified vulnerability in the error handler in Hitachi Web Page Generator and Web Page Generator Enterprise 4.01 and earlier, when using the default error template and debug mode is set to ON, allows remote attackers to determine internal directory structures via unknown attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_page_generator, web_page_generator_enterprise
References: http://secunia.com/advisories/12150, http://www.hitachi-support.com/security_e/vuls_e/HS04-003_e/index-e.html, http://www.osvdb.org/8263
CVE-2004-0538
LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary code without warning the user.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://docs.info.apple.com/article.html?artnum=25785, http://docs.info.apple.com/article.html?artnum=25785
CVE-2004-1653
The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: openssh
References: http://marc.info/?l=bugtraq&m=109413637313484&w=2, http://securitytracker.com/id?1011143, http://www.osvdb.org/9562
CVE-2004-2493
Directory traversal vulnerability in Groupmax World Wide Web (GmaxWWW) 2 and 3, and Desktop 5, 6, and Desktop for Jichitai allows remote authenticated users to read arbitrary .html files via the template name parameter.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Affected Products: groupmax_world_wide_web_desktop, groupmax_world_wide_web
References: http://secunia.com/advisories/13321, http://www.hitachi-support.com/security_e/vuls_e/HS04-007_e/01-e.html, http://www.osvdb.org/12153
CVE-2004-0192
Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: gateway_security_5400
References: http://marc.info/?l=bugtraq&m=107790684732458&w=2, http://www.securityfocus.com/bid/9755, https://exchange.xforce.ibmcloud.com/vulnerabilities/15330
CVE-2004-1764
Buffer overflow in CDE libDtSvc on HP-UX B.11.00, B.11.04, B.11.11, and B.11.22 allows local users to gain root privileges via unknown vectors.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://www.ciac.org/ciac/bulletins/o-057.shtml, http://www.kb.cert.org/vuls/id/406406, http://www.securityfocus.com/advisories/6237
CVE-2004-0001
Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://security.gentoo.org/glsa/glsa-200402-06.xml, http://www.kb.cert.org/vuls/id/337238, http://www.redhat.com/support/errata/RHSA-2004-017.html
CVE-2004-1989
PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke, coppermine_photo_gallery
References: http://marc.info/?l=bugtraq&m=108360247732014&w=2, http://secunia.com/advisories/11524, http://securitytracker.com/id?1010001
CVE-2004-1363
Buffer overflow in extproc in Oracle 10g allows remote attackers to execute arbitrary code via environment variables in the library name, which are expanded after the length check is performed.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, database_server, application_server
Related CWEs: CWE-131
Related CAPECs: CAPEC-100, CAPEC-47
References: http://marc.info/?l=bugtraq&m=110382345829397&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.kb.cert.org/vuls/id/316206
CWE: CWE-131
CVE-2004-2769
Cerberus FTP Server before 4.0.3.0 allows remote authenticated users to list hidden files, even when the "Display hidden files" option is enabled, via the (1) MLSD or (2) MLST commands.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Affected Products: ftp_server
Related CWEs: CWE-264
References: http://secunia.com/advisories/40370, http://www.cerberusftp.com/phpBB3/viewtopic.php?f=4&t=644, http://www.cerberusftp.com/releasenotes.html
CWE: CWE-264
CVE-2004-1381
Firefox before 1.0 and Mozilla before 1.7.5 allow inactive (background) tabs to focus on input being entered in the active tab, as originally reported using form fields, which allows remote attackers to steal sensitive data that is intended for other sites, which could facilitate phishing attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mozilla, firefox
References: http://secunia.com/advisories/12712, http://secunia.com/multiple_browsers_dialog_box_spoofing_test/, http://secunia.com/multiple_browsers_form_field_focus_test/
CVE-2004-1256
Multiple buffer overflows in the (1) event_text and (2) event_specific functions in abc2midi 2004.12.04 allow remote attackers to execute arbitrary code via crafted ABC files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: abcmidi
References: http://tigger.uic.edu/~jlongs2/holes/abc2midi.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18573, https://exchange.xforce.ibmcloud.com/vulnerabilities/18574
CVE-2004-0502
Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: outlook
References: http://marc.info/?l=bugtraq&m=108420583612655&w=2, http://marc.info/?l=bugtraq&m=108637351805607&w=2, http://marc.info/?l=ntbugtraq&m=108644231209698&w=2
CVE-2004-2699
deleteicon.aspx in AspDotNetStorefront 3.3 allows remote attackers to delete arbitrary product images via a modified ProductID parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: aspdotnetstorefront
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0235.html, http://secunia.com/advisories/11839, http://securityreason.com/securityalert/3206
CWE: CWE-264
CVE-2004-2381
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jetty_http_server
References: http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76, http://secunia.com/advisories/11166/, http://sourceforge.net/project/shownotes.php?release_id=224743
CVE-2004-2462
cplay 1.49 on Linux allows local users to overwrite arbitrary files via a symlink attack on the cplay_control temporary file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cplay
References: http://secunia.com/advisories/11924, http://securitytracker.com/alerts/2004/Jun/1010574.html, http://www.osvdb.org/7222
CVE-2004-2778
Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands.
CVSS v3.0 Score: 7.1 (HIGH)
CVSS v3.0 Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: portage
Related CWEs: CWE-264
References: http://www.openwall.com/lists/oss-security/2017/01/28/7, https://bugs.gentoo.org/show_bug.cgi?id=141619, https://bugs.gentoo.org/show_bug.cgi?id=396153
CWE: CWE-264
CVE-2004-0597
Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: msn_messenger, windows_messenger, windows_media_player, libpng, windows_98se
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856, http://lists.apple.com/mhonarc/security-announce/msg00056.html
CVE-2004-2147
Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2) without a carriage return ("\n") separating the headers from the body.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: norton_antivirus
References: http://www.securityfocus.com/archive/82/376487/2004-09-24/2004-09-30/0, http://www.securityfocus.com/bid/11259, http://www.securityfocus.com/archive/82/376487/2004-09-24/2004-09-30/0
CVE-2004-1952
SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: advanced_guestbook
References: http://archives.neohapsis.com/archives/bugtraq/2005-02/0138.html, http://marc.info/?l=bugtraq&m=108258046402890&w=2, http://www.securityfocus.com/bid/10209
CVE-2004-1846
Multiple SQL injection vulnerabilities in News Manager Lite 2.5 allow remote attackers to execute arbitrary SQL code via the (1) ID parameter to more.asp, (2) ID parameter to category_news.asp, or (3) filter parameter to news_sort.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: news_manager_lite
References: http://marc.info/?l=bugtraq&m=107999733503496&w=2, http://secunia.com/advisories/11180, http://securitytracker.com/id?1009507
CVE-2004-2219
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: ie, internet_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2004-08/0215.html, http://secunia.com/advisories/12304, http://securitytracker.com/id?1010957
CVE-2004-1592
PHP remote file inclusion vulnerability in index.php in ocPortal 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code by modifying the req_path parameter to reference a URL on a remote web server that contains a malicious funcs.php script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ocportal
References: http://marc.info/?l=bugtraq&m=109763314312828&w=2, http://secunia.com/advisories/12811/, http://www.hackgen.org/advisories/hackgen-2004-002.txt
CVE-2004-1320
Asante FM2008 running firmware 1.06 is shipped with a default username and password, which could allow remote attackers to gain unauthorized access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fm2008_managed_ethernet_switch
References: http://marc.info/?l=bugtraq&m=110312733624864&w=2, http://www.securityfocus.com/bid/11947, https://exchange.xforce.ibmcloud.com/vulnerabilities/18521
CVE-2004-0416
Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: propack, linux, openbsd, cvs, openpkg
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CWE: CWE-119
CVE-2004-0160
Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: synaesthesia
References: http://www.debian.org/security/2004/dsa-446, http://www.securityfocus.com/bid/9713, https://exchange.xforce.ibmcloud.com/vulnerabilities/15279
CVE-2004-1547
The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long filename, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: activepost_standard
References: http://aluigi.altervista.org/adv/actp-adv.txt, http://marc.info/?l=bugtraq&m=109597139011373&w=2, http://secunia.com/advisories/12642
CVE-2004-0884
The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sasl, linux
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=134657, http://lists.apple.com/archives/security-announce/2005/Mar/msg00000.html, http://marc.info/?l=bugtraq&m=110693126007214&w=2