DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0420
The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ie, internet_explorer
References: http://secunia.com/advisories/10736/, http://www.kb.cert.org/vuls/id/106324, http://www.security-express.com/archives/bugtraq/2004-01/0300.html
CVE-2004-2138
Cross-site scripting (XSS) vulnerability in AWSguest.php in AllWebScripts MySQLGuest allows remote attackers to inject arbitrary HTML and PHP code via the (1) Name, (2) Email, (3) Homepage or (4) Comments field.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: mysqlguest
References: http://securitytracker.com/id?1011376, http://www.computerknights.org/forum_viewtopic.php?2.122, http://www.securityfocus.com/bid/11234
CVE-2004-0038
McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: epolicy_orchestrator
References: http://download.nai.com/products/patches/ePO/v2.x/Patch14.txt, http://www.osvdb.org/5626, http://www.securityfocus.com/bid/10200
CVE-2004-2014
Wget 1.9 and 1.9.1 allows local users to overwrite arbitrary files via a symlink attack on the name of the file being downloaded.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:P
Affected Products: wget
References: http://marc.info/?l=bugtraq&m=108481268725276&w=2, http://marc.info/?l=wget&m=108482747906833&w=2, http://marc.info/?l=wget&m=108483270227139&w=2
CVE-2004-0346
Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: proftpd
Related CWEs: CWE-193
References: http://marc.info/?l=bugtraq&m=107824679817240&w=2, http://www.securityfocus.com/bid/9782, https://exchange.xforce.ibmcloud.com/vulnerabilities/15387
CWE: CWE-193
CVE-2004-0932
McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, etrust_ez_armor, etrust_intrusion_detection, rav_antivirus_desktop, brightstor_arcserve_backup
References: http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true, http://www.securityfocus.com/bid/11448, https://exchange.xforce.ibmcloud.com/vulnerabilities/17761
CVE-2004-0333
Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: winzip, openpkg, uudeview, linux
References: http://secunia.com/advisories/10995, http://secunia.com/advisories/11019, http://www.ciac.org/ciac/bulletins/o-092.shtml
CVE-2004-1986
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke, coppermine_photo_gallery
References: http://marc.info/?l=bugtraq&m=108360247732014&w=2, http://secunia.com/advisories/11524, http://securitytracker.com/id?1010001
CVE-2004-0656
The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pureftpd
References: http://www.gentoo.org/security/en/glsa/glsa-200407-04.xml, http://www.pureftpd.org/, https://exchange.xforce.ibmcloud.com/vulnerabilities/16611
CVE-2004-1754
The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: gateway_security, enterprise_firewall
References: http://lists.virus.org/bugtraq-0406/msg00234.html, http://secunia.com/advisories/11888, http://securityresponse.symantec.com/avcenter/security/Content/2004.06.21.html
CVE-2004-0594
The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: converged_communications_server, debian_linux, secure_linux, hp-ux, openpkg
Related CWEs: CWE-367
Related CAPECs: CAPEC-29, CAPEC-27
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847, http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html, http://marc.info/?l=bugtraq&m=108981780109154&w=2
CWE: CWE-367
CVE-2004-0260
The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: cactushop_lite
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016819.html, http://marc.info/?l=bugtraq&m=107619501815888&w=2, http://www.securityfocus.com/bid/9589
CVE-2004-1338
The triggers in Oracle 9i and 10g allow local users to gain privileges by using a sequence of partially privileged actions: using CCBKAPPLROWTRIG or EXEC_CBK_FN_DML to add arbitrary functions to the SDO_CMT_DBK_FN_TABLE and SDO_CMT_CBK_DML_TABLE, then performing a DELETE on the SDO_TXN_IDX_INSERTS table, which causes the SDO_CMT_CBK_TRIG trigger to execute the user-supplied functions.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: database_server, oracle9i
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=110382230614420&w=2, http://www.ngssoftware.com/advisories/oracle23122004I.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18655
CWE: CWE-264
CVE-2004-0401
Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: libtasn1
References: http://packages.debian.org/changelogs/pool/main/libt/libtasn1-2/libtasn1-2_0.2.13-1/changelog, http://securitytracker.com/id?1010159, http://www.backports.org/changelog.html
CVE-2004-1075
Cross-site scripting (XSS) vulnerability in standard_error_message.dtml for Zwiki after 0.10.0rc1 to 0.36.2 allows remote attackers to inject arbitrary HTML and web script via a malformed URL, which is not properly cleansed when generating an error message.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: zwiki
References: http://marc.info/?l=bugtraq&m=110138568212036&w=2, http://marc.info/?l=bugtraq&m=110149122529761&w=2, http://www.gentoo.org/security/en/glsa/glsa-200412-23.xml
CVE-2004-0312
Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: wap55ag
References: http://marc.info/?l=bugtraq&m=107712101324233&w=2, http://marc.info/?l=bugtraq&m=107730681012131&w=2, http://www.securityfocus.com/bid/9688
CVE-2004-2436
Computer Associates Unicenter Common Services 3.0 and earlier stores the database "SA" password in cleartext in the TndAddNspTmp.bat file, which could allow local users to gain privileges.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: common_services, unicenter_serviceplus_service_desk, unicenter_network_and_systems_management
References: http://osvdb.org/displayvuln.php?osvdb_id=10408, http://secunia.com/advisories/12639/, http://securitytracker.com/id?1011468
CVE-2004-0495
Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: converged_communications_server, enterprise_linux, suse_linux, suse_email_server, modular_messaging_message_storage_server
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846, http://lwn.net/Articles/91155/
CVE-2004-2199
Cross-site scripting (XSS) vulnerability in DUware DUclassified 4.0 allows remote attackers to inject arbitrary web script or HTML via the message text.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: duclassified
References: http://www.securityfocus.com/bid/11363, http://www.securitytracker.com/alerts/2004/Oct/1011596.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/17686
CVE-2004-0033
admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpgedview
References: http://marc.info/?l=bugtraq&m=107340840209453&w=2, http://secunia.com/advisories/10565, http://www.osvdb.org/3404
CVE-2004-1778
Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissions, which allows local users to modify language files and possibly conduct social engineering or other attacks.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: skype
Related CWEs: CWE-276
Related CAPECs: CAPEC-127, CAPEC-1, CAPEC-81
MITRE ATT&CK Techniques: T1083, T1574.010
MITRE ATT&CK Tactics: T1574
References: http://marc.info/?l=bugtraq&m=110374568916303&w=2, http://marc.info/?l=bugtraq&m=110868557905786&w=2, http://www.securityfocus.com/bid/12081
CWE: CWE-276
MITRE ATT&CK techniques: T1083, T1574.010
MITRE ATT&CK tactics: T1574
CVE-2004-0640
Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_telnet, linux_netkit
References: http://www.debian.org/security/2004/dsa-529, http://www.idefense.com/application/poi/display?id=114&type=vulnerabilities, https://exchange.xforce.ibmcloud.com/vulnerabilities/16653
CVE-2004-2458
Open WebMail 2.30 and earlier, when use_syshomedir is disabled or create_syshomedir is enabled, creates new directories before authenticating, which allows remote attackers to create arbitrary directories.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: open_webmail
References: http://openwebmail.org/openwebmail/download/cert/patches/SA-04:02/openwebmail.pl.patch, http://secunia.com/advisories/11334, http://www.securityfocus.com/bid/10087
CVE-2004-0330
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: serv-u_file_server
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://marc.info/?l=bugtraq&m=107781164214399&w=2, http://www.cnhonker.com/advisory/serv-u.mdtm.txt, http://www.securityfocus.com/bid/9751
CWE: CWE-119
CVE-2004-1970
Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the resulting error message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: smartether_ss6215s_switch
References: http://marc.info/?l=bugtraq&m=108300407424571&w=2, http://www.securityfocus.com/bid/10219, https://exchange.xforce.ibmcloud.com/vulnerabilities/15973
CVE-2004-0610
The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusal) via a large number of open HTTP connections.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mn-500_wireless_base_station
References: http://marc.info/?l=bugtraq&m=108796481501258&w=2, http://www.kurczaba.com/securityadvisories/0406213.htm, http://www.securityfocus.com/bid/10585
CVE-2004-2001
ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc, http://www.securityfocus.com/bid/10289, ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc
CVE-2004-0542
PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via (1) the "%", "|", or ">" characters to the escapeshellcmd function, or (2) the "%" character to the escapeshellarg function.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: php
References: http://www.idefense.com/application/poi/display?id=108, http://www.php.net/release_4_3_7.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/16331
CVE-2004-2271
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: minimal_http_server
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0208.html, http://secunia.com/advisories/13114, http://securitytracker.com/id?1012106
CVE-2004-2431
Unknown vulnerability in The Ignition Project ignitionServer 0.1.2 through 0.3.1, with the linking service enabled, allows remote attackers to bypass authentication.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ignitionserver
References: http://secunia.com/advisories/11824, http://sourceforge.net/forum/forum.php?forum_id=381807, http://www.osvdb.org/6844
CVE-2004-0428
Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," has unknown attack vectors and unknown impact.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.virus.org/macsec-0405/msg00000.html, http://secunia.com/advisories/11539, http://securitytracker.com/id?1010045
CVE-2004-0090
Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not "shutdown properly," which has unknown impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html, http://secunia.com/advisories/10723/, http://www.auscert.org.au/render.html?it=3791&cid=1
CVE-2004-0687
Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd, suse_linux, x11r6
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000924, http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch, http://lists.apple.com/archives/security-announce/2005/May/msg00001.html
CVE-2004-2489
Format string vulnerability in IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to execute arbitrary code via a modified INFORMIXDIR environment variable that points to a file with format string specifiers in the filename.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: informix_dynamic_server
References: http://marc.info/?l=bugtraq&m=107524391217364&w=2, http://secunia.com/advisories/10737, http://www-1.ibm.com/support/docview.wss?uid=swg21153336
CVE-2004-2209
SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: idealbb
References: http://www.maxpatrol.com/advdetails.asp?id=14, http://www.maxpatrol.com/mp_advisory.asp, http://www.securityfocus.com/bid/11424
CVE-2004-2405
Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: f-secure_for_firewalls, f-secure_internet_security, f-secure_anti-virus, internet_gatekeeper
References: http://secunia.com/advisories/11712, http://www.f-secure.com/security/fsc-2004-1.shtml, https://exchange.xforce.ibmcloud.com/vulnerabilities/16258
CVE-2004-2341
PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearch_path parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: isearch
References: http://www.securitytracker.com/alerts/2004/Feb/1008900.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15009, http://www.securitytracker.com/alerts/2004/Feb/1008900.html
CVE-2004-2442
Multiple interpretation error in various F-Secure Anti-Virus products, including Workstation 5.43 and earlier, Windows Servers 5.50 and earlier, MIMEsweeper 5.50 and earlier, Anti-Virus for Linux Servers and Gateways 4.61 and earlier, and other products, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on the target system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: f-secure_personal_express, f-secure_for_firewalls, f-secure_internet_security, f-secure_anti-virus, internet_gatekeeper
References: http://secunia.com/advisories/13263/, http://www.ciac.org/ciac/bulletins/p-041.shtml, http://www.f-secure.com/security/fsc-2004-3.shtml
CVE-2004-1699
SettingsBase.php in Pinnacle ShowCenter 1.51 allows remote attackers to cause a denial of service (web interface errors) via an invalid Skin parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: showcenter
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026733.html, http://marc.info/?l=bugtraq&m=109589167110196&w=2, http://www.securityfocus.com/bid/11232
CVE-2004-0507
Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: propack, ethereal
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916
CVE-2004-1816
Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: coldfusion, jrun, one_application_server
References: http://marc.info/?l=bugtraq&m=107936690702515&w=2, http://secunia.com/advisories/11130, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57517-1
CVE-2004-2329
Kerio Personal Firewall (KPF) 2.1.5 allows local users to execute arbitrary code with SYSTEM privileges via the Load button in the Firewall Configuration Files option, which does not drop privileges before opening the file loading dialog box.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: personal_firewall
References: http://secunia.com/advisories/10746/, http://www.osvdb.org/3748, http://www.securityfocus.com/bid/9525
CVE-2004-1299
Buffer overflow in the get_attr function in html.c for vilistextum 2.6.6 allows remote attackers to execute arbitrary code via a crafted web page.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vilistextum
References: http://tigger.uic.edu/~jlongs2/holes/vilistextum.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18610, http://tigger.uic.edu/~jlongs2/holes/vilistextum.txt
CVE-2004-1873
SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via the catcode parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: a-cart
References: http://marc.info/?l=bugtraq&m=108057887008983&w=2, http://s-a-p.ca/index.php?page=OurAdvisories&id=27, http://secunia.com/advisories/11236
CVE-2004-0867
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.  NOTE: it was later reported that 2.x is also affected.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, firefox, internet_explorer, konqueror, ie
Related CWEs: CWE-264
References: http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html, http://marc.info/?l=bugtraq&m=109536612321898&w=2, http://secunia.com/advisories/12580/
CWE: CWE-264
CVE-2004-1635
Bugzilla 2.17.1 through 2.18rc2 and 2.19 from cvs, when using the insidergroup feature, does not sufficiently protect private attachments when there are changes to the metadata, such as filename, description, MIME type, or review flags, which allows remote authenticated users to obtain sensitive information when (1) viewing the bug activity log or (2) receiving bug change notification mails.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bugzilla
References: http://marc.info/?l=bugtraq&m=109872095201238&w=2, http://www.securityfocus.com/bid/11511, https://bugzilla.mozilla.org/show_bug.cgi?id=250605
CVE-2004-1103
MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to gain sensitive information via the debug parameter, which reveals information such as the path to the web root and the web server version.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mailpost
References: http://www.kb.cert.org/vuls/id/858726, http://www.procheckup.com/security_info/vuln_pr0409.html, http://www.securityfocus.com/bid/11595
CVE-2004-0522
Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, gallery
References: http://secunia.com/advisories/11752, http://security.gentoo.org/glsa/glsa-200406-10.xml, http://www.debian.org/security/2004/dsa-512
CVE-2004-2435
Cross-site scripting (XSS) vulnerability in PeopleSoft Human Resources Management System (HRMS) 7.0, when "web enabled" using HTML Access, allows remote attackers to inject arbitrary web script or HTML via unspecified (1) debugging or (2) utility scripts.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: hrms
References: http://secunia.com/advisories/12674/, http://www.auscert.org.au/render.html?it=4419, http://www.securityfocus.com/bid/11275
CVE-2004-1407
Multiple directory traversal vulnerabilities in singapore Image Gallery Web Application 0.9.10 allow remote attackers to (1) read arbitrary files via the showThumb method for thumb.php, or (2) delete arbitrary files via admin.class.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: image_gallery_web_application
References: http://marc.info/?l=bugtraq&m=110323479715051&w=2, http://www.security.org.sg/vuln/singapore0910.html, http://www.securityfocus.com/bid/11990
CVE-2004-2079
Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: red-alert
References: http://genhex.org/releases/031003.txt, http://marc.info/?l=full-disclosure&m=107635119005407&w=2, http://securitytracker.com/id?1009001
CVE-2004-2029
The Util_DecodeHTTPAuth function in BNBT BitTorrent Tracker Beta 7.5 Release 2 and earlier allows remote attackers to cause a denial of service (crash) via a Basic Authorization HTTP request with a "A==" value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: bnbt
References: http://bnbt.go-dedicated.com/, http://fux0r.phathookups.com/advisory/sp-x12-advisory.txt, http://marc.info/?l=bugtraq&m=108526361421535&w=2
CVE-2004-2333
Bodington 2.1.0 RC1 and earlier does not secure the file upload area, which allows remote attackers to read uploaded files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bodington
References: http://sourceforge.net/tracker/index.php?func=detail&aid=789761&group_id=87659&atid=583930, http://www.osvdb.org/3770, http://www.secunia.com/advisories/10749/
CVE-2004-1458
The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to port 2002.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: secure_acs_solution_engine, secure_access_control_server
References: http://osvdb.org/9182, http://secunia.com/advisories/12386/, http://www.ciac.org/ciac/bulletins/o-203.shtml
CVE-2004-0034
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the phorum_check_xss function in common.php, (2) the EditError variable in profile.php, and (3) the Error variable in login.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phorum
References: http://marc.info/?l=bugtraq&m=107340481804110&w=2, http://phorum.org/, http://secunia.com/advisories/10567
CVE-2004-0588
Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: usermin
References: http://marc.info/?l=bugtraq&m=108781564518287&w=2, http://www.gentoo.org/security/en/glsa/glsa-200406-15.xml, http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/73_e.html
CVE-2004-1885
Ipswitch WS_FTP Server 4.0.2 allows remote authenticated users to execute arbitrary programs as SYSTEM by using the SITE command to modify certain iFtpSvc options that are handled by iftpmgr.exe.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ws_ftp_server
References: http://marc.info/?l=bugtraq&m=108006581418116&w=2, http://secunia.com/advisories/11206, http://www.securityfocus.com/bid/9953
CVE-2004-1537
Cross-site scripting (XSS) vulnerability in popup.php in PHPKIT 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary web script via the img parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpkit
References: http://marc.info/?l=bugtraq&m=110117116115493&w=2, http://secunia.com/advisories/13262, http://www.securityfocus.com/bid/11725
CVE-2004-2512
CRLF injection vulnerability in calendar.php in DCP-Portal 5.3.2 and earlier allows remote attackers to conduct HTTP response splitting attacks to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the PHPSESSID parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: dcp-portal
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0042.html, http://secunia.com/advisories/12751, http://securitytracker.com/id?1011481
CVE-2004-1257
Buffer overflow in the process_abc function in abc.c for abc2mtex 1.6.1 allows remote attackers to execute arbitrary code via crafted ABC files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: abc2mtex
References: http://tigger.uic.edu/~jlongs2/holes/abc2mtex.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18578, http://tigger.uic.edu/~jlongs2/holes/abc2mtex.txt
CVE-2004-1391
Untrusted execution path vulnerability in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious mount program.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: rtp, rtos
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html, http://www.kb.cert.org/vuls/id/577566, http://www.osvdb.org/9661
CVE-2004-2407
Unknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact, related to a "security hole" in the Setup/Config functionality.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phpgroupware
References: http://sourceforge.net/project/shownotes.php?release_id=153116, http://sourceforge.net/project/shownotes.php?release_id=153116
CVE-2004-1988
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke, coppermine_photo_gallery
References: http://marc.info/?l=bugtraq&m=108360247732014&w=2, http://secunia.com/advisories/11524, http://securitytracker.com/id?1010001
CVE-2004-0137
Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of "page invalidation issues."
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040601-01-P.asc, http://secunia.com/advisories/11872, http://www.osvdb.org/7124
CVE-2004-0710
IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.2(17b)SXA, before 12.2(17d)SXB, or before 12.2(14)SY03 could allow remote attackers to cause a denial of service (device crash and reload) via a malformed Internet Key Exchange (IKE) packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://www.cisco.com/warp/public/707/cisco-sa-20040408-vpnsm.shtml, http://www.kb.cert.org/vuls/id/904310, http://www.securityfocus.com/bid/10083
CVE-2004-0758
Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mozilla
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://bugzilla.mozilla.org/show_bug.cgi?id=249004, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-2050
eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and entering the "maertsJ" password, which is hard-coded into lshell.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thintune_xm, thintune_xs, thintune_mobile, thintune_extreme, thintune_s
References: http://marc.info/?l=bugtraq&m=109068491801021&w=2, http://secunia.com/advisories/12154, http://securitytracker.com/id?1010770
CVE-2004-1125
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: xpdf, kde, cups
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl2.patch, ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-0694
Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771.  NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: lha
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.redhat.com/support/errata/RHSA-2004-323.html, http://www.redhat.com/support/errata/RHSA-2004-440.html, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9981
CWE: CWE-119
CVE-2004-2160
Format string vulnerability in xml_elem.c for XMLStarlet Command Line XML Toolkit 0.9.3 may allow attackers to cause a denial of service or execute arbitrary code.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: command_line_xml_toolkit
References: http://cvs.sourceforge.net/viewcvs.py/xmlstar/xmlstarlet/src/xml_elem.c?r1=1.17&r2=1.18, http://sourceforge.net/project/shownotes.php?release_id=268962, http://cvs.sourceforge.net/viewcvs.py/xmlstar/xmlstarlet/src/xml_elem.c?r1=1.17&r2=1.18
CVE-2004-2308
Cross-site scripting (XSS) vulnerability in cPanel 9.1.0 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the dir parameter in dohtaccess.html.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cpanel
References: http://www.securityfocus.com/archive/1/357231, http://www.securityfocus.com/bid/9853, https://exchange.xforce.ibmcloud.com/vulnerabilities/15485
CVE-2004-0351
Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: spidersales
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018177.html, http://marc.info/?l=bugtraq&m=107833097705486&w=2, http://www.securityfocus.com/bid/9799
CVE-2004-0962
Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitrary code when loginwindow is active via Fast User Switching.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: apple_remote_desktop
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00002.html, http://lists.apple.com/archives/security-announce/2004/Oct/msg00002.html
CVE-2004-0382
Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x
References: http://docs.info.apple.com/article.html?artnum=61798, http://lists.apple.com/mhonarc/security-announce/msg00047.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15769
CVE-2004-1991
Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aldo\'s_web_server
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://marc.info/?l=bugtraq&m=108360629031227&w=2, http://secunia.com/advisories/11542, http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt
CWE: CWE-22
CVE-2004-1975
Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: pafiledb
References: http://marc.info/?l=bugtraq&m=108311096022485&w=2, http://marc.info/?l=bugtraq&m=109613031414184&w=2, http://www.securityfocus.com/bid/10229
CVE-2004-1073
The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: enterprise_linux, suse_linux, secure_linux, linux_kernel, linux_advanced_workstation
References: http://secunia.com/advisories/18684, http://secunia.com/advisories/20162, http://secunia.com/advisories/20163
CVE-2004-2324
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dotnetnuke
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html, http://secunia.com/advisories/10747, http://www.osvdb.org/3750
CVE-2004-0646
Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: coldfusion, jrun
References: http://secunia.com/advisories/12647/, http://www.kb.cert.org/vuls/id/990200, http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html
CVE-2004-1671
Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to gain sensitive information via a direct request to (1) accountsettings_add.html or (2) topmenu.html.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_mail
References: http://marc.info/?l=bugtraq&m=109483971420067&w=2, http://secunia.com/advisories/12789, http://www.securityfocus.com/bid/11371
CVE-2004-1753
The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: mozilla, navigator, firefox
References: http://bugzilla.mozilla.org/show_bug.cgi?id=162134, http://secunia.com/advisories/12392, http://www.securityfocus.com/archive/1/373080
CVE-2004-1152
Buffer overflow in the mailListIsPdf function in Adobe Acrobat Reader 5.09 for Unix allows remote attackers to execute arbitrary code via an e-mail message with a crafted PDF attachment.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: acrobat_reader
References: http://secunia.com/advisories/13474, http://www.adobe.com/support/techdocs/331153.html, http://www.idefense.com/application/poi/display?id=161&type=vulnerabilities&flashstatus=false
CVE-2004-0754
Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim
References: http://gaim.sourceforge.net/security/?id=2, http://secunia.com/advisories/12383, http://secunia.com/advisories/12480
CVE-2004-0411
The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: konqueror
Related CWEs: CWE-88
Related CAPECs: CAPEC-137, CAPEC-88, CAPEC-174
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000843, http://marc.info/?l=bugtraq&m=108481412427344&w=2, http://secunia.com/advisories/11602
CWE: CWE-88
CVE-2004-1057
Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel, enterprise_linux
References: http://secunia.com/advisories/18562, http://www.kernel.org/pub/linux/kernel/people/andrea/kernels/v2.4/2.4.23aa3/00_VM_IO-4, http://www.redhat.com/support/errata/RHSA-2005-016.html
CVE-2004-1272
Buffer overflow in the save_embedded_address function in filter.c for elm/bolthole filter 2.6.1 allows remote attackers to execute arbitrary code via a crafted email message.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: filter
References: http://tigger.uic.edu/~jlongs2/holes/elm-bolthole-filter.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18607, http://tigger.uic.edu/~jlongs2/holes/elm-bolthole-filter.txt
CVE-2004-2242
Cross-site scripting (XSS) vulnerability in search.php in Phorum, possibly 5.0.7 beta and earlier, allows remote attackers to inject arbitrary HTML or web script via the subject parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phorum
References: http://phorum.org/cvs-changelog-5.txt, http://securitytracker.com/id?1010787, http://www.securityfocus.com/bid/10822
CVE-2004-0360
Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://marc.info/?l=bugtraq&m=107852274423414&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57454, http://www.ciac.org/ciac/bulletins/o-088.shtml
CVE-2004-1436
The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: optical_networking_systems_software
References: http://secunia.com/advisories/12117, http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml, http://www.kb.cert.org/vuls/id/760432
CVE-2004-0526
Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: outlook, outlook_express, ie, internet_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html, http://marc.info/?l=bugtraq&m=108422905510713&w=2, http://www.kurczaba.com/securityadvisories/0405132poc.htm
CVE-2004-1855
Dark Age of Camelot before 1.68 live patch does not sign the RSA public key, which could allow remote malicious servers to gain sensitive information via a man-in-the-middle attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dark_age_of_camelot
References: http://capnbry.net/daoc/advisory20040323/, http://lists.netsys.com/pipermail/full-disclosure/2004-March/019212.html, http://marc.info/?l=bugtraq&m=108016932816707&w=2
CVE-2004-1274
The DownloadLoop function in main.c for greed 0.81p allows remote attackers to execute arbitrary code via a GRX file containing a filename with shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: greed
References: http://tigger.uic.edu/~jlongs2/holes/greed.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18634, http://tigger.uic.edu/~jlongs2/holes/greed.txt
CVE-2004-1961
blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded "'" characters ("%27").
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: protector_system
References: http://protector.warcenter.se/article-53--0-0.html, http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0, http://www.securityfocus.com/bid/10206
CVE-2004-2201
SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in messages.asp, (2) MSG_ID parameter in messageDetail.asp, or (3) password parameter in the login form.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: duforum
References: http://www.osvdb.org/10664, http://www.osvdb.org/10665, http://www.osvdb.org/10666