DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0104
Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, propack, linux_advanced_workstation, metamail
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html, http://marc.info/?l=bugtraq&m=107713476911429&w=2, http://secunia.com/advisories/10908
CVE-2004-1180
Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, mandrake_linux, mandrake_linux_corporate_server, solaris, sunos
References: http://secunia.com/advisories/14309, http://www.debian.org/security/2005/dsa-678, http://www.mandriva.com/security/advisories?name=MDKSA-2005:039
CVE-2004-1721
The (1) function.php or (2) function.view.php scripts in Merak Mail Server 5.2.7 allow remote attackers to read arbitrary PHP files via a direct HTTP request to port 32000.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mail_server
References: http://marc.info/?l=bugtraq&m=109279057326044&w=2, http://packetstormsecurity.nl/0408-exploits/merak527.txt, http://secunia.com/advisories/12269
CVE-2004-0568
HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt, windows_xp, windows_2003_server
References: http://marc.info/?l=bugtraq&m=110312618614849&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-043, https://exchange.xforce.ibmcloud.com/vulnerabilities/18336
CVE-2004-0549
The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_explorer
References: http://62.131.86.111/analysis.htm, http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0031.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0104.html
CVE-2004-1092
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service by causing mc to free unallocated memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, midnight_commander, debian_linux, suse_linux, linux
References: http://secunia.com/advisories/13863/, http://www.debian.org/security/2005/dsa-639, http://www.gentoo.org/security/en/glsa/glsa-200502-24.xml
CVE-2004-2252
The firewall in Astaro Security Linux before 4.024 sends responses to SYN-FIN packets, which makes it easier for remote attackers to obtain information about the system and construct specialized attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: astaro_security_linux
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://secunia.com/advisories/13089, http://securitytracker.com/id?1012065, http://www.astaro.org/showflat.php?Cat=&Number=51459&page=0&view=collapsed&sb=5&o=&fpart=1#51459
CWE: CWE-203
CVE-2004-2506
Unparsed web content delivery vulnerability in WIKINDX before 0.9.9g allows remote attackers to obtain sensitive information via a direct HTTP request to the config.inc file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wikindx
References: http://secunia.com/advisories/11394, http://sourceforge.net/project/shownotes.php?release_id=231421, http://www.osvdb.org/5401
CVE-2004-1586
Flash Messaging clients can ignore disconnecting commands such as "shutdown" from the Flash Messaging Server 5.2.0g (rev 1.1.2), which could allow remote attackers to stay connected.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: flash_messaging_server
References: http://marc.info/?l=bugtraq&m=109716787607302&w=2, http://secunia.com/advisories/12759/, http://securitytracker.com/id?1011569
CVE-2004-1055
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: phpmyadmin, linux
References: http://www.netvigilance.com/html/advisory0005.htm, http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-3, https://exchange.xforce.ibmcloud.com/vulnerabilities/18158
CVE-2004-1148
phpMyAdmin before 2.6.1, when configured with UploadDir functionality, allows remote attackers to read arbitrary files via the sql_localfile parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpmyadmin
References: http://marc.info/?l=bugtraq&m=110295781828323&w=2, http://www.exaprobe.com/labs/advisories/esa-2004-1213.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18441
CVE-2004-2504
The GUI in Alt-N Technologies MDaemon 7.2 and earlier, including 6.8, executes child processes such as NOTEPAD.EXE with SYSTEM privileges when users create new files, which allows local users with physical access to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mdaemon
References: http://archives.neohapsis.com/archives/bugtraq/2004-11/0385.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1324.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1353.html
CVE-2004-0295
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open idle connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: broker_ftp_server
References: http://marc.info/?l=bugtraq&m=107705346817241&w=2, http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html, http://www.securityfocus.com/bid/9680
CVE-2004-0269
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=107643348117646&w=2, http://www.scan-associates.net/papers/phpnuke69.txt, http://www.securityfocus.com/bid/9630
CVE-2004-0566
Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_explorer
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.html, http://www.kb.cert.org/vuls/id/266926, http://www.us-cert.gov/cas/techalerts/TA04-212A.html
CVE-2004-2179
asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and width values.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: frontpage, ie
References: http://www.securityfocus.com/archive/1/378431, http://www.securityfocus.com/archive/1/378619, http://www.securityfocus.com/bid/11412
CVE-2004-1030
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux, fcron
References: http://security.gentoo.org/glsa/glsa-200411-27.xml, http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false, http://www.securityfocus.com/bid/11684
CVE-2004-0475
The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm.  NOTE: this bug may overlap CVE-2003-1041.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: ie
References: http://www.securityfocus.com/archive/1/363202, http://www.securityfocus.com/bid/10348, https://exchange.xforce.ibmcloud.com/vulnerabilities/16147
CVE-2004-2657
Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a new installation of Firefox, as reported for the list of Passwords Never Saved web sites.  NOTE: The vendor has disputed this issue, stating that "The uninstaller is primarily there to uninstall the application. It is not there to uninstall user data. For the moment I will stick by my module-owner decision.
CVSS v2.0 Score: 1.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:S/C:P/I:N/A:N
Affected Products: firefox
References: http://www.securityfocus.com/archive/1/431021/100/0/threaded, http://www.securityfocus.com/archive/1/431063/100/0/threaded, https://bugzilla.mozilla.org/show_bug.cgi?id=234680
CVE-2004-0682
comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: comersus_cart
References: http://marc.info/?l=bugtraq&m=108922336529987&w=2, http://www.securityfocus.com/bid/10674, https://exchange.xforce.ibmcloud.com/vulnerabilities/16645
CVE-2004-0226
Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slackware_linux, midnight_commander, propack, linux
References: http://security.gentoo.org/glsa/glsa-200405-21.xml, http://www.debian.org/security/2004/dsa-497, http://www.mandriva.com/security/advisories?name=MDKSA-2004:039
CVE-2004-1236
Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: directory_server
References: http://marc.info/?l=bugtraq&m=110384298016120, http://secunia.com/advisories/14960, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57754-1
CVE-2004-0208
The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt, windows_xp, windows_2003_server
References: http://marc.info/?l=bugtraq&m=109772135404427&w=2, http://www.kb.cert.org/vuls/id/910998, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032
CVE-2004-2207
Cross-site scripting (XSS) vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: idealbb
References: http://www.maxpatrol.com/advdetails.asp?id=14, http://www.maxpatrol.com/mp_advisory.asp, http://www.securityfocus.com/bid/11424
CVE-2004-1156
Mozilla before 1.7.6, and Firefox before 1.0.1, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mozilla, firefox
References: http://secunia.com/advisories/13129/, http://secunia.com/multiple_browsers_window_injection_vulnerability_test/, http://secunia.com/secunia_research/2004-13/advisory/
CVE-2004-0071
Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter ($cmd variable) to index.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
References: http://marc.info/?l=bugtraq&m=107392764118403&w=2, http://www.securityfocus.com/bid/9395, http://www.securitytracker.com/id?1008689
CVE-2004-2157
Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7-beta3, allows remote attackers to inject arbitrary HTML and PHP code via the (1) email or (2) username field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: serendipity
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026955.html, http://secunia.com/advisories/12673/, http://securitytracker.com/id?1011448
CVE-2004-0515
Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log files."
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html, http://securitytracker.com/id?1010330, http://www.securityfocus.com/bid/10432
CVE-2004-1100
Cross-site scripting (XSS) vulnerability in mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, when debug mode is enabled, allows remote attackers to execute arbitrary web script or HTML via the append parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: mailpost
References: http://www.kb.cert.org/vuls/id/107998, http://www.procheckup.com/security_info/vuln_pr0410.html, http://www.securityfocus.com/bid/11596
CVE-2004-0162
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ripmime, mailsweeper, internet_gatekeeper
References: http://marc.info/?l=bugtraq&m=109517563513776&w=2, http://www.uniras.gov.uk/vuls/2004/380375/mime.htm, https://exchange.xforce.ibmcloud.com/vulnerabilities/17332
CVE-2004-0414
CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: propack, linux, openbsd, cvs, openpkg
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html
CVE-2004-2416
Buffer overflow in the logging component of CCProxy allows remote attackers to execute arbitrary code via a long HTTP GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ccproxy
References: http://secunia.com/advisories/13085, http://securitytracker.com/id?1012189, http://www.osvdb.org/11593
CVE-2004-2192
SQL injection vulnerability in tttadmin/settings.php in Turbo Traffic Trader PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the ttt_admin parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: turbotraffictrader_php
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0296.html, http://secunia.com/advisories/12785, http://securitytracker.com/id?1011609
CVE-2004-0991
Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, mpg123
References: http://secunia.com/advisories/13779, http://secunia.com/advisories/13788, http://secunia.com/advisories/13899
CVE-2004-0403
Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: racoon
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt, ftp://patches.sgi.com/support/free/security/advisories/20040506-01-U.asc, http://marc.info/?l=bugtraq&m=108369640424244&w=2
CVE-2004-2652
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: snort
References: http://secunia.com/advisories/13664, http://securitytracker.com/id?1012656, http://taosecurity.blogspot.com/2004/12/details-on-snort-dos-condition-you-may.html
CVE-2004-2184
Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or "..\" sequences in commands such as (1) dir or (2) put.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: yak
References: http://aluigi.altervista.org/adv/yak-adv.txt, http://marc.info/?l=full-disclosure&m=109788315103778&w=2, http://secunia.com/advisories/12849
CVE-2004-1966
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter in board.php, (2) sortorder, perpage, or id parameters in member.php, (3) forums parameter in search.php, or (4) PID or FID parameters in post.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbb
References: http://marc.info/?l=bugtraq&m=108301983206107&w=2, http://secunia.com/advisories/11481, http://securitytracker.com/id?1009935
CVE-2004-0193
Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: proventia_g_series_xpu, realsecure_network, proventia_a_series_xpu, blackice_server_protection, blackice_agent_server
References: http://marc.info/?l=bugtraq&m=107789851117176&w=2, http://secunia.com/advisories/10988, http://www.eeye.com/html/Research/Advisories/AD20040226.html
CVE-2004-0621
admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: newsletter_zws
References: http://marc.info/?l=bugtraq&m=108811585025216&w=2, http://www.securityfocus.com/bid/10605, https://exchange.xforce.ibmcloud.com/vulnerabilities/16507
CVE-2004-0050
Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: ultraseek
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0024.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020952.html, http://marc.info/?l=bugtraq&m=108377388114888&w=2
CVE-2004-1589
Cross-site scripting (XSS) vulnerability in GoSmart Message Board allows remote attackers to execute inject web script or HTML via the (1) Category parameter to Forum.asp or (2) MainMessageID parameter to ReplyToQuestion.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: gosmart_message_board
References: http://marc.info/?l=bugtraq&m=109751522823011&w=2, http://secunia.com/advisories/12790/, http://www.securityfocus.com/bid/11361
CVE-2004-0095
McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: epolicy_orchestrator
References: http://download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zip, http://www.osvdb.org/3744, http://www.securityfocus.com/bid/9476
CVE-2004-1998
The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reveals the full path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108378804809891&w=2, http://www.waraxe.us/index.php?modname=sa&id=27, http://marc.info/?l=bugtraq&m=108378804809891&w=2
CVE-2004-0578
WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash (//) characters in a URL request to the wingate-internal directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wingate
References: http://marc.info/?l=full-disclosure&m=108872788123695&w=2, http://www.idefense.com/application/poi/display?id=113, https://exchange.xforce.ibmcloud.com/vulnerabilities/16589
CVE-2004-0618
FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: freebsd
References: http://marc.info/?l=bugtraq&m=108816603102865&w=2, http://www.securityfocus.com/bid/10596, https://exchange.xforce.ibmcloud.com/vulnerabilities/16499
CVE-2004-0950
NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via (1) a NetOp HELO request, or (2) when responses are disabled, a "custom" HELO request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netop
References: http://msgs.securepoint.com/cgi-bin/get/bugtraq0411/213.html, http://www.corsaire.com/advisories/c040619-001.txt, http://www.securityfocus.com/bid/11710
CVE-2004-0197
Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jet
References: http://www.kb.cert.org/vuls/id/740716, http://www.securityfocus.com/bid/10112, http://www.us-cert.gov/cas/techalerts/TA04-104A.html
CVE-2004-2480
Squid Web Proxy Cache 2.3.STABLE5 allows remote attackers to bypass security controls and access arbitrary websites via "@@" sequences in a URL within Internet Explorer.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: squid_web_proxy_cache
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0070.html, http://www.securityfocus.com/bid/10315, https://exchange.xforce.ibmcloud.com/vulnerabilities/16153
CVE-2004-1661
MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailworks_professional
References: http://marc.info/?l=bugtraq&m=109416709710447&w=2, http://secunia.com/advisories/12458, http://www.securityfocus.com/bid/11095
CVE-2004-1513
04WebServer 1.42 does not adequately filter data that is written to log files, which could allow remote attackers to inject carriage return characters into the log file and spoof log entries.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: 04webserver
References: http://marc.info/?l=bugtraq&m=110012542615484&w=2, http://marc.info/?l=bugtraq&m=110054395311823&w=2, http://secunia.com/advisories/13159/
CVE-2004-2753
Unspecified vulnerability in SharedX in HP-UX B.11.00, B.11.11, and B.11.22 allows local users to access unspecified files or cause a denial of service via unknown vectors related to handling of "files in a potentially insecure manner."
CVSS v2.0 Score: 5.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:C
Affected Products: hp-ux
References: http://secunia.com/advisories/10657, http://www.ciac.org/ciac/bulletins/o-058.shtml, http://www.securityfocus.com/bid/9420
CVE-2004-1423
Multiple PHP remote file inclusion vulnerabilities in Sean Proctor PHP-Calendar before 0.10.1, as used in Commonwealth of Massachusetts Virtual Law Office (VLO) and other products, allow remote attackers to execute arbitrary PHP code via a URL in the phpc_root_path parameter to (1) includes/calendar.php or (2) includes/setup.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-calendar
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://marc.info/?l=bugtraq&m=110434580716205&w=2, http://secunia.com/advisories/22516, http://securitytracker.com/id?1017107
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2004-2299
Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allows remote attackers to execute arbitrary code via an HTTP GET request with a long Range header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: omnihttpd
References: http://www.osvdb.org/12944, http://www.securityfocus.com/archive/1/363651, http://www.securityfocus.com/bid/10376
CVE-2004-1359
Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57508-1, http://www.auscert.org.au/render.html?it=3935, http://www.securityfocus.com/bid/9837
CVE-2004-1996
Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote attackers to inject arbitrary web script via the size tag.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: smf
References: http://marc.info/?l=bugtraq&m=108377364615934&w=2, http://www.securityfocus.com/bid/10281, https://exchange.xforce.ibmcloud.com/vulnerabilities/16067
CVE-2004-1484
Format string vulnerability in the _msg function in error.c in socat 1.4.0.3 and earlier, when used as an HTTP proxy client and run with the -ly option, allows remote attackers or local users to execute arbitrary code via format string specifiers in a syslog message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: socat
References: http://secunia.com/advisories/12936/, http://www.dest-unreach.org/socat/advisory/socat-adv-1.html, http://www.gentoo.org/security/en/glsa/glsa-200410-26.xml
CVE-2004-0635
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, ethereal, mandrake_linux, linux, linux_advanced_workstation
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916, http://secunia.com/advisories/12024
CVE-2004-0753
The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gtk, gdkpixbuf
Related CWEs: CWE-835
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875, http://secunia.com/advisories/17657, http://www.debian.org/security/2004/dsa-546
CWE: CWE-835
CVE-2004-2599
Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service (application crash) via the server console or rcon.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quake_ii_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html, http://secur1ty.net/advisories/001, http://securitytracker.com/id?1011979
CVE-2004-2275
i-mall.cgi in I-Mall Commerce allows remote attackers to execute arbitrary commands via shell metacharacters via the p parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: i-mall.cgi
References: http://secunia.com/advisories/11972, http://www.osvdb.org/7461, http://www.securiteam.com/exploits/5UP0715FPC.html
CVE-2004-2376
Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request with a long attfile attribute.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: twilight_utilities_web_server
References: http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt, http://www.securitytracker.com/alerts/2004/Mar/1009443.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15515
CVE-2004-1060
Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack."  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tcp, icmp
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.4/SCOSA-2006.4.txt, http://marc.info/?l=bugtraq&m=112861397904255&w=2, http://secunia.com/advisories/18317
CVE-2004-1879
Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script or HTML via forum messages.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpkit
References: http://marc.info/?l=bugtraq&m=108067894822358&w=2, http://www.securityfocus.com/bid/10013, https://exchange.xforce.ibmcloud.com/vulnerabilities/15681
CVE-2004-1181
htmlheadline before 21.8 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: htmlheadline
References: http://secunia.com/advisories/13715, http://securitytracker.com/id?1012756, http://www.debian.org/security/2005/dsa-622
CVE-2004-1796
PHP remote file inclusion vulnerability in HotNews 0.7.2 and earlier allows remote attackers to execute arbitrary PHP code via the (1) config[header] parameter to hotnews-engine.inc.php3 or (2) config[incdir] parameter to hnmain.inc.php3.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hotnews
References: http://secunia.com/advisories/10551, http://securitytracker.com/id?1008608, http://sourceforge.net/forum/forum.php?forum_id=342594
CVE-2004-1200
Firefox and Mozilla allow remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: firefox
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029434.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029491.html, http://www.securityfocus.com/bid/11752
CVE-2004-0217
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.
CVSS v3.1 Score: 7.0 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: antivirus_scan_engine, linux
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://marc.info/?l=bugtraq&m=107694800908164&w=2, http://www.securityfocus.com/bid/9662, https://exchange.xforce.ibmcloud.com/vulnerabilities/15215
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2004-1467
Multiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.0.00.003 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) date or search text field in the calendar module, (2) Field parameter, Filter parameter, QField parameter, Start parameter or Search field in the address module, (3) Subject field in the message module or (4) Subject field in the Ticket module.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: egroupware
References: http://sourceforge.net/forum/forum.php?forum_id=401807, http://www.gentoo.org/security/en/glsa/glsa-200409-06.xml, http://www.securityfocus.com/archive/1/372603
CVE-2004-2556
NetGear WG602 (aka WG602v1) Wireless Access Point firmware 1.04.0 and 1.5.67 has a hardcoded account of username "super" and password "5777364", which allows remote attackers to modify the configuration.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: wg602
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0036.html, http://kbserver.netgear.com/kb_web_files/n101383.asp, http://secunia.com/advisories/11773
CVE-2004-2214
Mbedthis AppWeb HTTP server before 1.1.3 allows remote attackers to bypass access restrictions via a URI with mixed case characters.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: appweb_http_server
Related CWEs: CWE-178
References: http://secunia.com/advisories/12011, http://www.mbedthis.com/products/appWeb/doc/product/newFeatures.html, http://www.osvdb.org/7391
CWE: CWE-178
CVE-2004-0245
Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: web_crossing
References: http://marc.info/?l=bugtraq&m=107586518120516&w=2, http://www.securityfocus.com/bid/9576, https://exchange.xforce.ibmcloud.com/vulnerabilities/15022
CVE-2004-1064
The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ubuntu_linux, php
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915, http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml, http://www.hardened-php.net/advisories/012004.txt
CVE-2004-2463
Buffer overflow in ADA Image Server (ImgSvr) 0.4 allows remote attackers to cause a denial of service (web server crash) or execute arbitrary code via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imgsvr
References: http://members.lycos.co.uk/r34ct/main/ADA%20Image%20Server%20%28ImgSvr%29%200.4.txt, http://secunia.com/advisories/11287, http://www.osvdb.org/4945
CVE-2004-2104
Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to obtain sensitive server information, including the internal IP address, via a direct request to (1) snoop.jsp, (2) SnoopServlet, (3) env.bas, or (4) lcgitest.nlm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netware
References: http://marc.info/?l=bugtraq&m=107487862304440&w=2, http://secunia.com/advisories/10711, http://www.osvdb.org/3715
CVE-2004-1896
Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: winamp
References: http://marc.info/?l=bugtraq&m=108118289208693&w=2, http://secunia.com/advisories/11285, http://securitytracker.com/id?1009660
CVE-2004-0273
Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: realone_player, realone_enterprise_desktop, realone_desktop_manager
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://marc.info/?l=bugtraq&m=107642978524321&w=2, http://service.real.com/help/faq/security/040123_player/EN/, http://www.kb.cert.org/vuls/id/514734
CWE: CWE-22
CVE-2004-2019
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108482957715299&w=2, http://secunia.com/advisories/11625, http://www.securityfocus.com/bid/10367
CVE-2004-1434
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.1(0) to 4.1(2), 4.5(x), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via malformed SNMP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: optical_networking_systems_software
References: http://secunia.com/advisories/12117, http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml, http://www.kb.cert.org/vuls/id/548968
CVE-2004-1259
Multiple buffer overflows in the handle_directive function in abcpp.c for abcpp 1.3.0 allow remote attackers to execute arbitrary code via crafted ABC files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: abcpp
References: http://tigger.uic.edu/~jlongs2/holes/abcpp.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18581, http://tigger.uic.edu/~jlongs2/holes/abcpp.txt
CVE-2004-1271
Buffer overflow in the dxfin function in d.c for dxfscope 0.2 allows remote attackers to execute arbitrary code via a crafted DXF file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dxf_file_format_viewer
References: http://tigger.uic.edu/~jlongs2/holes/dxfscope.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18558, http://tigger.uic.edu/~jlongs2/holes/dxfscope.txt
CVE-2004-0736
The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) "**" or (2) "+" search patterns, which reveals the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=109026609504767&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16736, http://marc.info/?l=bugtraq&m=109026609504767&w=2
CVE-2004-2650
Spooler in Apache Foundation James 2.2.0 allows local users to cause a denial of service (memory consumption) by triggering various error conditions in the retrieve function, which prevents a lock from being released and causes a memory leak.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Affected Products: james
References: http://issues.apache.org/jira/browse/JAMES-268, http://james.apache.org/changelog.html, http://www.securityfocus.com/bid/15765
CVE-2004-1107
dispatch-conf in Portage 2.0.51-r2 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: linux
References: http://bugs.gentoo.org/show_bug.cgi?id=69147, http://secunia.com/advisories/13108/, http://www.gentoo.org/security/en/glsa/glsa-200411-13.xml
CVE-2004-2077
Nadeo Game Engine for Nadeo TrackMania and Nadeo Virtual Skipper 3 allows remote attackers to cause a denial of service (server crash) via malformed data to TCP port 2350, possibly due to long values or incorrect size fields.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: virtual_skipper, trackmania, game_engine
References: http://lists.netsys.com/pipermail/full-disclosure/2004-February/016906.html, http://www.securiteinfo.com/attaques/hacking/trackmaniados.shtml, http://www.securityfocus.com/archive/1/353182
CVE-2004-1113
SQL injection vulnerability in SQLgrey Postfix greylisting service before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) sender or (2) recipient e-mail addresses.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sqlgrey_postfix_greylisting_service
References: http://secunia.com/advisories/13135/, http://sourceforge.net/project/shownotes.php?release_id=281256, http://www.securityfocus.com/bid/11633
CVE-2004-0529
The modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31 and earlier without mod_phpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as (1) proftpdvhosts or (2) addalink.cgi, a different vulnerability than CVE-2004-0490.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suexec.patch
References: http://bugzilla.cpanel.net/show_bug.cgi?id=668, http://marc.info/?l=bugtraq&m=108663003608211&w=2, http://secunia.com/advisories/11798
CVE-2004-0590
FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: strongswan, frees_wan, super_frees_wan, openswan
References: http://security.gentoo.org/glsa/glsa-200406-20.xml, http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:070, http://www.openswan.org/support/vuln/can-2004-0590/
CVE-2004-2337
The /.inlook/.crypt file for inlook 0.7.3 and earlier is installed with world readable permissions, which allows local users to obtain user POP3 credentials.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: inlook
References: http://secunia.com/advisories/10752/, http://www.osvdb.org/3771, http://www.securityfocus.com/bid/9527
CVE-2004-2475
Cross-site scripting (XSS) vulnerability in Google Toolbar 2.0.114.1 allows remote attackers to inject arbitrary web script via about.html in the About section.  NOTE: some followup posts suggest that the demonstration code's use of the res:// protocol does not cross privilege boundaries, since it is not allowed in the Internet Zone. Thus this might not be a vulnerability.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: toolbar
References: http://archives.neohapsis.com/archives/bugtraq/2004-09/0226.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0629.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0639.html
CVE-2004-1485
Buffer overflow in the TFTP client in InetUtils 1.4.2 allows remote malicious DNS servers to execute arbitrary code via a large DNS response that is handled by the gethostbyname function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tftp, inetutils
References: http://marc.info/?l=bugtraq&m=109882085912915&w=2, http://www.securityfocus.com/bid/11527, https://exchange.xforce.ibmcloud.com/vulnerabilities/17878
CVE-2004-0087
The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html, http://www.osvdb.org/6819, http://www.securityfocus.com/bid/9504
CVE-2004-0051
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as (1) uuencode, (2) mac-binhex40, and (3) yenc, which may be interpreted differently by mail clients.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ripmime, mailsweeper, internet_gatekeeper
References: http://marc.info/?l=bugtraq&m=109517788100063&w=2, http://www.uniras.gov.uk/vuls/2004/380375/mime.htm, https://exchange.xforce.ibmcloud.com/vulnerabilities/17337