DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0284
Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: outlook, ie, internet_explorer
References: http://marc.info/?l=bugtraq&m=107643134712133&w=2, http://www.securityfocus.com/bid/9629, https://exchange.xforce.ibmcloud.com/vulnerabilities/15127
CVE-2004-1237
Unknown vulnerability in the system call filtering code in the audit subsystem for Red Hat Enterprise Linux 3 allows local users to cause a denial of service (system crash) via unknown vectors.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, enterprise_linux_desktop, suse_linux, enterprise_linux
References: http://www.redhat.com/support/errata/RHSA-2005-043.html, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11282, http://www.redhat.com/support/errata/RHSA-2005-043.html
CVE-2004-2767
NWFTPD.nlm before 5.04.25 in the FTP server in Novell NetWare does not promptly close DS sessions, which allows remote attackers to cause a denial of service (connection slot exhaustion) by establishing many FTP sessions that persist for the lifetime of a DS session.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected Products: netware_ftp_server, netware
Related CWEs: CWE-264
References: http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1, http://www.novell.com/support/viewContent.do?externalId=3238588&sliceId=1
CWE: CWE-264
CVE-2004-1601
Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a .. (dot dot) in the op parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: coolphp_web_portal
References: http://marc.info/?l=bugtraq&m=109810941419669&w=2, http://secunia.com/advisories/12850, http://securitytracker.com/id?1011748
CVE-2004-2693
HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed uses insecure directory permissions, which allows local users to gain privileges via files in /opt/gnome/src/GLib/.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=108455531606056&w=2, http://secunia.com/advisories/11615, http://www.hp.com/products1/unix/java/mozilla/HPSBUX01034.html
CWE: CWE-264
CVE-2004-0474
Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL.  NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: windows_xp
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0440.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0450.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0688.html
CVE-2004-0713
The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permissions before unexporting a bean, which allows remote authenticated users to remove EJB objects from remote views before the security exception is thrown.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_57.00.jsp, http://www.kb.cert.org/vuls/id/658878, http://www.securityfocus.com/bid/10185
CVE-2004-1439
Buffer overflow in BlackJumboDog 3.x allows remote attackers to execute arbitrary code via long FTP commands such as (1) USER, (2) PASS, (3) RETR,(4) CWD, (5) XMKD, and (6) XRMD.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: black_jumbodog
References: http://secunia.com/advisories/12203, http://www.ir3ip.net/pipermail/bugtraq/2004-September/009960.html, http://www.kb.cert.org/vuls/id/714584
CVE-2004-2175
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: reviewpost_php_pro
References: http://secunia.com/advisories/10786/, http://www.securityfocus.com/archive/1/352598, http://www.securityfocus.com/bid/9574
CVE-2004-1642
WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service (crash) via a series of long MLIST commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wftpd
References: http://marc.info/?l=bugtraq&m=109396193723317&w=2, http://secunia.com/advisories/12420, http://www.securityfocus.com/bid/11067
CVE-2004-1639
Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows remote attackers to cause a denial of service (application crash or memory consumption) via a large binary file with a .html extension.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gecko, mozilla, firefox
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q4/0017.html, http://marc.info/?l=bugtraq&m=109886388528179&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17839
CVE-2004-2638
The Admin Access With Levels plugin in osCommerce 1.5.1 allows remote attackers to access files in the "admin/" directory by modifying the in_login parameter to a non-zero value.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: oscommerce
References: http://secunia.com/advisories/11473, http://secwatch.org/advisories/1007857, http://www.osvdb.org/5717
CVE-2004-1968
The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbitrary messages by modifying the id parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openbb
References: http://marc.info/?l=bugtraq&m=108301983206107&w=2, http://secunia.com/advisories/11481, http://securitytracker.com/id?1009935
CVE-2004-1556
MyWebServer 1.0.3 allows remote attackers to cause a denial of service (application crash) via a large number of connections within a short time.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mywebserver
References: http://marc.info/?l=bugtraq&m=109630333230707&w=2, http://secunia.com/advisories/12689, http://securitytracker.com/id?1011461
CVE-2004-2509
Cross-site scripting (XSS) vulnerabilities in (1) calendar.php, (2) login.php, and (3) online.php in Infopop UBB.Threads 6.2.3 and 6.5 allow remote attackers to inject arbitrary web script or HTML via the Cat parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ubb.threads
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html, http://secunia.com/advisories/13452, http://securitytracker.com/id?1012503
CVE-2004-1445
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: nessus
References: http://secunia.com/advisories/12127/, http://www.gentoo.org/security/en/glsa/glsa-200408-11.xml, http://www.nessus.org/nessus_2_0.html
CVE-2004-0631
Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: acrobat_reader
References: http://security.gentoo.org/glsa/glsa-200408-14.xml, http://www.adobe.com/support/techdocs/322914.html, http://www.idefense.com/application/poi/display?id=125&type=vulnerabilities
CVE-2004-1924
Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to inject arbitrary web script or HTML via via the (1) theme parameter to tiki-switch_theme.php, (2) find and priority parameters to messu-mailbox.php, (3) flag, priority, flagval, sort_mode, or find parameters to messu-read.php, (4) articleId parameter to tiki-read_article.php, (5) parentId parameter to tiki-browse_categories.php, (6) comments_threshold parameter to tiki-index.php (7) articleId parameter to tiki-print_article.php, (8) galleryId parameter to tiki-list_file_gallery.php, (9) galleryId parameter to tiki-upload_file.php, (10) faqId parameter to tiki-view_faq.php, (11) chartId parameter to tiki-view_chart.php, or (12) surveyId parameter to tiki-survey_stats_survey.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: tikiwiki_cms//groupware
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=108180073206947&w=2, http://secunia.com/advisories/11344, http://tikiwiki.org/tiki-read_article.php?articleId=66
CWE: CWE-79
CVE-2004-1199
Safari 1.2.4 on Mac OS X 10.3.6 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: safari
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029458.html, http://www.securityfocus.com/bid/11759, https://exchange.xforce.ibmcloud.com/vulnerabilities/18282
CVE-2004-0923
CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x_server, mac_os_x, cups
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html, http://www.ciac.org/ciac/bulletins/p-002.shtml, http://www.debian.org/security/2004/dsa-566
CVE-2004-0563
The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: freenet6
References: http://secunia.com/advisories/12705/, http://securitytracker.com/id?1011460, http://www.debian.org/security/2004/dsa-555
CVE-2004-0804
Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected Products: libtiff
Related CWEs: CWE-369
References: http://bugzilla.remotesensing.org/show_bug.cgi?id=111, http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000888, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101677-1
CWE: CWE-369
CVE-2004-0388
The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mysql
References: http://dev.mysql.com/doc/mysql/en/news-4-1-2.html, http://marc.info/?l=bugtraq&m=108206802810402&w=2, http://secunia.com/advisories/11223/
CVE-2004-2542
Multiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote attackers to execute arbitrary SQL commands via unknown attack vectors, resulting in an ability to execute stored procedures, bypass login authentication, and cause an unspecified denial of service to backend databases.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webpac
References: http://archives.neohapsis.com/archives/bugtraq/2004-08/0354.html, http://securitytracker.com/id?1011073, http://www.osvdb.org/9274
CVE-2004-2297
The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large, out-of-range score parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: php-nuke
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0310.html, http://secunia.com/advisories/11852, http://www.osvdb.org/7002
CVE-2004-2128
Cross-site scripting (XSS) vulnerability in BRS WebWeaver 1.07 allows remote attackers to execute arbitrary script as other users via the query string to ISAPISkeleton.dll.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: webweaver
References: http://marc.info/?l=bugtraq&m=107531020924977&w=2, http://secunia.com/advisories/10741, http://www.brswebweaver.com/modules.php?op=modload&name=News&file=article&sid=1
CVE-2004-1587
Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long secure Gamespy query.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: alien_versus_predator, shogo, no_one_lives_forever, blood
References: http://marc.info/?l=bugtraq&m=109728194025487&w=2, http://marc.info/?l=full-disclosure&m=109727077824860&w=2, http://secunia.com/advisories/12776/
CVE-2004-1554
PHP remote file inclusion vulnerability in livre_include.php in @lex Guestbook allows remote attackers to execute arbitrary PHP code by modifying the chem_absolu parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: alex_guestbook
References: http://marc.info/?l=bugtraq&m=109635806703748&w=2, http://packetstormsecurity.nl/0410-exploits/alexPHP.txt, http://securitytracker.com/id?1011432
CVE-2004-2326
SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to bypass authentication via the (1) login or (2) password.  NOTE: this issue was later reported to also affect firmware 4.0.34.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ip3_netaccess_-_wireless_hotspots, ip3_netaccess, ip3_netaccess_-_hospitality
References: http://www.securityfocus.com/archive/1/432007/100/0/threaded, http://www.securityfocus.com/bid/9858, https://exchange.xforce.ibmcloud.com/vulnerabilities/26106
CVE-2004-0044
Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: personal_assistant
References: http://www.cisco.com/warp/public/707/cisco-sa-20040108-pa.shtml, http://www.osvdb.org/3430, http://www.securityfocus.com/bid/9384
CVE-2004-1167
mirrorselect before 0.89 creates temporary files in a world-writable location with predictable file names, which allows remote attackers to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mirrorselect
References: http://secunia.com/advisories/13392/, http://www.gentoo.org/security/en/glsa/glsa-200412-05.xml, https://exchange.xforce.ibmcloud.com/vulnerabilities/18382
CVE-2004-1776
Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification (DOCSIS) standard.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml, http://www.kb.cert.org/vuls/id/840665, https://exchange.xforce.ibmcloud.com/vulnerabilities/6180
CVE-2004-1160
Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: navigator
References: http://secunia.com/advisories/13402/, http://secunia.com/multiple_browsers_window_injection_vulnerability_test/, http://secunia.com/secunia_research/2004-13/advisory/
CVE-2004-2253
Directory traversal vulnerability in user.cgi in SurgeLDAP 1.0g and earlier allows remote attackers to read arbitrary files via a .. in the page parameter of the show command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: surgeldap
References: http://members.lycos.co.uk/r34ct/main/SurgeLDAP%201.0g.txt, http://secunia.com/advisories/11343, http://www.securityfocus.com/bid/10103
CVE-2004-2424
BEA WebLogic Server and WebLogic Express 8.1 through 8.1 SP2 allow remote attackers to cause a denial of service (network port consumption) via unknown actions in HTTPS sessions, which prevents the server from releasing the network port when the session ends.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/pub/advisory/7, http://secunia.com/advisories/11864, http://securitytracker.com/id?1010492
CVE-2004-2004
The Live CD in SUSE LINUX 9.1 Personal edition is configured without a password for root, which allows remote attackers to gain privileges via SSH.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux
References: http://www.securityfocus.com/bid/10297, http://www.suse.de/de/security/2004_11_live_cd_91.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/16084
CVE-2004-2234
Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: moodle
References: http://moodle.org/doc/?file=releaseold.html, http://www.osvdb.org/7711, http://moodle.org/doc/?file=releaseold.html
CVE-2004-0248
Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: phpx
References: http://marc.info/?l=bugtraq&m=107586932324901&w=2, http://secunia.com/advisories/10797/, http://www.securityfocus.com/bid/9569
CVE-2004-0977
The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: enterprise_linux, postgresql, secure_linux, mandrake_linux, mandrake_linux_corporate_server
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300, http://marc.info/?l=bugtraq&m=109910073808903&w=2, http://security.gentoo.org/glsa/glsa-200410-16.xml
CVE-2004-1535
PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=110075903308817&w=2, http://marc.info/?l=bugtraq&m=110082153702843&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18151
CVE-2004-2265
UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: uudeview
References: http://www.securityfocus.com/bid/9857, https://exchange.xforce.ibmcloud.com/vulnerabilities/15492, http://www.securityfocus.com/bid/9857
CVE-2004-2286
Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large multiplier, which may trigger a buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: perl, activeperl
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0878.html, http://www.securityfocus.com/bid/10380, https://exchange.xforce.ibmcloud.com/vulnerabilities/16224
CVE-2004-2145
SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the (1) sortdir or (2) criteria parameter to ladder-log.asp or the (3) memberid or (4) teamid parameter to view-profile.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: megabbs
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0962.html, http://marc.info/?l=bugtraq&m=109631200701134&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17497
CVE-2004-0706
Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=235510, http://marc.info/?l=bugtraq&m=108965446813639&w=2, http://www.securityfocus.com/bid/10698
CVE-2004-0041
The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mod_auth_shadow
Related CWEs: CWE-264
References: http://secunia.com/advisories/10612, http://www.debian.org/security/2004/dsa-421, http://www.osvdb.org/3454
CWE: CWE-264
CVE-2004-1006
Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dhcpd
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0287.html, http://archives.neohapsis.com/archives/bugtraq/2004-11/0037.html, http://marc.info/?l=bugtraq&m=109968710822449&w=2
CVE-2004-0337
Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / (slash) and the desired script.  NOTE: the vendor states that this bug could not be reproduced, so this issue may be REJECTed in the future.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: 602pro_lan_suite
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html, http://marc.info/?l=bugtraq&m=107799540630302&w=2, http://www.securityfocus.com/bid/9777
CVE-2004-0749
The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: subversion, linux
References: http://fedoranews.org/updates/FEDORA-2004-318.shtml, http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt, http://www.gentoo.org/security/en/glsa/glsa-200409-35.xml
CVE-2004-0257
OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd, netbsd
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-002.txt.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016704.html, http://marc.info/?l=bugtraq&m=107604603226564&w=2
CVE-2004-1973
DiGi Web Server allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request that contains a large number of / (slash) characters, which consumes resources when DiGi converts the slashes to \ (backslash) characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: www_server
References: http://marc.info/?l=bugtraq&m=108311170018203&w=2, http://secunia.com/advisories/11490, http://securitytracker.com/alerts/2004/Apr/1009957.html
CVE-2004-2136
dm-crypt on Linux kernel 2.6.x, when used on certain file systems with a block size 1024 or greater, has certain "IV computation" weaknesses that allow watermarked files to be detected without decryption.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
References: http://marc.info/?l=linux-kernel&m=107719798631935&w=2, http://mareichelt.de/pub/notmine/diskenc.pdf, http://www.securiteam.com/exploits/5UP0P1PFPM.html
CVE-2004-0459
The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka "jabber"), which prevents devices from transmitting data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 802.11_wireless_protocol
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0631.html, http://securitytracker.com/id?1010152, http://support.avaya.com/elmodocs2/security/ASA-2004-009.pdf
CVE-2004-0132
Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to archivednews.php, and a malicious version of lang_admin.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ezcontents
References: http://marc.info/?l=bugtraq&m=107651585921958&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/15135, http://marc.info/?l=bugtraq&m=107651585921958&w=2
CVE-2004-1585
Flash Messaging 5.2.0g (rev 1.1.2) and earlier allows remote attackers to cause a denial of service (application crash) via certain wide characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: flash_messaging
References: http://marc.info/?l=bugtraq&m=109716787607302&w=2, http://secunia.com/advisories/12759/, http://securitytracker.com/id?1011569
CVE-2004-0451
Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, sup
References: http://securitytracker.com/id?1010539, http://www.debian.org/security/2004/dsa-521, http://www.securityfocus.com/bid/10571
CVE-2004-0966
The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ubuntu_linux, gettext
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136323, http://marc.info/?l=bugtraq&m=110382652226638&w=2, http://www.gentoo.org/security/en/glsa/glsa-200410-10.xml
CVE-2004-1195
Star Wars Battlefront 1.11 and earlier allows remote attackers to cause a denial of service (application crash) via a join request that contains a memory address that causes the server to read arbitrary memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: star_wars_battlefront
References: http://marc.info/?l=bugtraq&m=110132227932050&w=2, http://www.securityfocus.com/bid/11750, https://exchange.xforce.ibmcloud.com/vulnerabilities/18257
CVE-2004-1800
Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: simpledata
References: http://secunia.com/advisories/10595, http://securitytracker.com/id?1008695, http://www.securityfocus.com/bid/9380
CVE-2004-2026
Format string vulnerability in the logmsg function in svc.c for Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pound
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0343.html, http://secunia.com/advisories/11528, http://security.gentoo.org/glsa/glsa-200405-08.xml
CVE-2004-2055
Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=109034476122723&w=2, http://secunia.com/advisories/12114, http://www.securityfocus.com/bid/10753
CVE-2004-2468
Cross-site scripting (XSS) vulnerability in SillySearch 2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: sillysearch
References: http://secunia.com/advisories/11260, http://www.osvdb.org/4755, http://www.securitytracker.com/alerts/2004/Mar/1009598.html
CVE-2004-0103
crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: crawl
References: http://secunia.com/advisories/10788/, http://www.debian.org/security/2004/dsa-432, http://www.securityfocus.com/bid/9566
CVE-2004-0929
Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, libtiff
References: http://www.idefense.com/application/poi/display?id=154&type=vulnerabilities, http://www.kb.cert.org/vuls/id/129910, http://www.novell.com/linux/security/advisories/2004_38_libtiff.html
CVE-2004-2107
Finjan SurfinGate 6.0 and 7.0, when running in proxy mode, does not authenticate FHTTP commands on TCP port 3141, which allows remote attackers to use the finjan-parameter-type header to (1) restart the service, (2) use the getlastmsg command to view log information, or (3) use the online command to force a policy update from the database server.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: surfingate
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/0929.html, http://marc.info/?l=bugtraq&m=107487999406339&w=2, http://marc.info/?l=bugtraq&m=107522480913629&w=2
CVE-2004-0118
The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html, http://www.ciac.org/ciac/bulletins/o-114.shtml, http://www.eeye.com/html/Research/Advisories/AD20040413E.html
CVE-2004-1539
Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, which triggers a NULL dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: halo_combat_evolved
References: http://marc.info/?l=bugtraq&m=110114770406920&w=2, http://secunia.com/advisories/13273, http://www.securityfocus.com/bid/11724
CVE-2004-1080
The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt, windows_2003_server
References: http://marc.info/?l=bugtraq&m=110150370506704&w=2, http://secunia.com/advisories/13328/, http://securitytracker.com/id?1012516
CVE-2004-0798
Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: whatsup_gold
References: http://www.idefense.com/application/poi/display?type=vulnerabilities, http://www.ipswitch.com/Support/WhatsUp/patch-upgrades.html, http://www.securityfocus.com/bid/11043
CVE-2004-1930
Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108182759214035&w=2, http://secunia.com/advisories/11347, http://www.securityfocus.com/bid/10128
CVE-2004-1584
CRLF injection vulnerability in wp-login.php in WordPress 1.2 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the text parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: wordpress
References: http://marc.info/?l=bugtraq&m=109716327724041&w=2, http://secunia.com/advisories/12773, http://wordpress.org/development/2004/10/wp-121/
CVE-2004-2216
Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: java_system_application_server, java_system_web_server
References: http://secunia.com/advisories/13072, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101589-1, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57669-1
CVE-2004-2653
Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1) admin/userlevelmembers-edit.asp and (2) admin/edit-groups.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: megabbs
References: http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924, http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924
CVE-2004-0040
Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vpn-1, firewall-1
References: http://marc.info/?l=bugtraq&m=107604682227031&w=2, http://www.ciac.org/ciac/bulletins/o-073.shtml, http://www.kb.cert.org/vuls/id/873334
CVE-2004-2664
John Lim ADOdb Library for PHP before 4.23 allows remote attackers to obtain sensitive information via direct requests to certain scripts that result in an undefined value of ADODB_DIR, which reveals the installation path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: adodb
References: http://phplens.com/lens/adodb/docs-adodb.htm#changes, http://phplens.com/lens/adodb/docs-adodb.htm#changes
CVE-2004-0061
WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with a trailing . (dot), or (2) a URI with a leading slash or backslash character.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: www_file_share_pro
References: http://marc.info/?l=bugtraq&m=107411794303201&w=2, http://www.securitytracker.com/id?1008779, http://marc.info/?l=bugtraq&m=107411794303201&w=2
CVE-2004-0650
UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: servletexec
References: http://secunia.com/advisories/11979/, http://www.cisco.com/warp/public/707/cisco-sa-20040630-CCS.shtml, http://www.kb.cert.org/vuls/id/718896
CVE-2004-0004
The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing remote attackers to spoof requests from other users.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openca
References: http://marc.info/?l=bugtraq&m=107427313700554&w=2, http://www.kb.cert.org/vuls/id/336446, http://www.openca.org/news/CAN-2004-0004.txt
CVE-2004-0677
Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang) via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive ("A").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netfile_ftp_web_server
References: http://marc.info/?l=bugtraq&m=108904874104880&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16615, http://marc.info/?l=bugtraq&m=108904874104880&w=2
CVE-2004-1428
ArGoSoft FTP before 1.4.2.1 generates an error message if the user name does not exist instead of prompting for a password, which allows remote attackers to determine valid usernames.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ftp_server
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://marc.info/?l=bugtraq&m=110451582011666&w=2, http://secunia.com/advisories/13063, http://securitytracker.com/id?1012744
CWE: CWE-203
CVE-2004-0334
InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videophone_sysctrl.asp that contains a trailing / (slash).  NOTE: the original report mentioned AXIS 2100 Network Camera, but this was likely a cut-and-paste error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: innomedia_videophone
References: http://marc.info/?l=bugtraq&m=107799556111784&w=2, http://securitytracker.com/alerts/2004/Mar/1009522.html, http://www.osvdb.org/4809
CVE-2004-0770
romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of (1) gzip or (2) bzip ROM files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: debian_linux, emulator
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=263282&archive=yes, http://secunia.com/advisories/12214, http://www.securityfocus.com/bid/10855
CVE-2004-2302
Race condition in the sysfs_read_file and sysfs_write_file functions in Linux kernel before 2.6.10 allows local users to read kernel memory and cause a denial of service (crash) via large offsets in sysfs files.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:N/A:P
Affected Products: linux_kernel
References: http://kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.10-rc1/2.6.10-rc1-mm1/broken-out/fix-race-in-sysfs_read_file-and-sysfs_write_file.patch, http://linux.bkbits.net:8080/linux-2.6/cset%404186a4deVoR88JjTwMa3ZnIp-_YJsA, http://secunia.com/advisories/17826
CVE-2004-1254
WinRAR 3.40, and possibly earlier versions, allows remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename, possibly causing an integer overflow that leads to a buffer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: winrar
References: http://www.frsirt.com/exploits/20041217.Winrar.c.php, https://exchange.xforce.ibmcloud.com/vulnerabilities/18569, http://www.frsirt.com/exploits/20041217.Winrar.c.php
CVE-2004-1000
lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lintian
References: http://secunia.com/advisories/13771, http://www.debian.org/security/2004/dsa-630, https://exchange.xforce.ibmcloud.com/vulnerabilities/18808
CVE-2004-0365
The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
Related CWEs: CWE-476
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835, http://marc.info/?l=bugtraq&m=108058005324316&w=2, http://marc.info/?l=bugtraq&m=108213710306260&w=2
CWE: CWE-476
CVE-2004-2281
Multiple unknown vulnerabilities in IBM Lotus Notes 6.5.x before 6.5.4 and 6.0.x before 6.0.5 have unknown impact and attack vectors, related to Java applets, as identified by (1) KSPR5YS6GR and (2) KSPR62F4D3.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lotus_notes
References: http://secunia.com/advisories/12046, http://www-1.ibm.com/support/docview.wss?rs=475&context=SSKTWP&q1=Java&uid=swg21173910&loc=en_US&cs=utf-8&lang=en, http://www.osvdb.org/8416
CVE-2004-2771
The expand function in fio.c in Heirloom mailx 12.5 and earlier and BSD mailx 8.1.2 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an email address.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, bsd_mailx, mailx, linux
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://linux.oracle.com/errata/ELSA-2014-1999.html, http://rhn.redhat.com/errata/RHSA-2014-1999.html, http://seclists.org/oss-sec/2014/q4/1066
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-1903
Buffer overflow in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an object tag.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: contact_3d
References: http://marc.info/?l=bugtraq&m=108127833002955&w=2, http://www.securityfocus.com/bid/10064, https://exchange.xforce.ibmcloud.com/vulnerabilities/15625
CVE-2004-1512
Cross-site scripting (XSS) vulnerability in Response_default.html in 04WebServer 1.42 allows remote attackers to execute arbitrary web script or HTML via script code in the URL, which is not quoted in the resulting default error page.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: 04webserver
References: http://marc.info/?l=bugtraq&m=110012542615484&w=2, http://marc.info/?l=bugtraq&m=110054395311823&w=2, http://secunia.com/advisories/13159/
CVE-2004-0972
The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: logical_volume_management_utilities, linux
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136308, http://rhn.redhat.com/errata/RHBA-2004-232.html, http://www.securityfocus.com/bid/11290
CVE-2004-1456
filediff in CVStrac allows remote attackers to execute arbitrary commands via shell metacharacters in rcsinfo.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cvstrac
References: http://marc.info/?l=bugtraq&m=109173359428253&w=2, http://secunia.com/advisories/12090/, http://www.cvstrac.org/cvstrac/chngview?cn=316
CVE-2004-2109
Multiple cross-site scripting (XSS) vulnerabilities in (1) imagezoom.asp or (2) recommend.asp in Q-Shop allow remote attackers to execute arbitrary script and steal the user session ID via Javascript in a URL.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: q-shop
References: http://marc.info/?l=bugtraq&m=107488132208229&w=2, http://secunia.com/advisories/10704, http://www.osvdb.org/3696
CVE-2004-1176
Buffer underflow in extfs.c in Midnight Commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, midnight_commander, debian_linux, suse_linux, linux
References: http://secunia.com/advisories/13863, http://securitytracker.com/id?1012903, http://www.debian.org/security/2005/dsa-639
CVE-2004-1946
Format string vulnerability in the PRINT_ERROR function in common.c for Cherokee Web Server 0.4.16 and earlier allows local users to execute arbitrary code via format string specifiers in the -C command line argument.  NOTE: it is not clear whether this issue could be exploited remotely, or if Cherokee is running at escalated privileges. Therefore it might not be a vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cherokee_httpd
References: http://marc.info/?l=bugtraq&m=108249818308672&w=2, http://www.nosystem.com.ar/advisories/advisory-03.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/15924