DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1018
Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the pack function, or (3) an "integer overflow/underflow" in the unpack function.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ubuntu_linux, php
References: http://marc.info/?l=bugtraq&m=110314318531298&w=2, http://www.hardened-php.net/advisories/012004.txt, http://www.mandriva.com/security/advisories?name=MDKSA-2004:151
CVE-2004-1590
Clientexec allows remote attackers to gain sensitive information via an HTTP request to phpinfo.php, which calls the phpinfo function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: clientexec
References: http://marc.info/?l=bugtraq&m=109787365801512&w=2, http://secunia.com/advisories/12862, https://exchange.xforce.ibmcloud.com/vulnerabilities/17741
CVE-2004-0176
Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000835, http://marc.info/?l=bugtraq&m=108007072215742&w=2, http://marc.info/?l=bugtraq&m=108058005324316&w=2
CVE-2004-2576
class.vfs_dav.inc.php in phpGroupWare 0.9.16.000 does not create .htaccess files to enable authorization checks for access to users' home-directory files, which allows remote attackers to obtain sensitive information from these files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpgroupware
References: http://www.osvdb.org/7617, https://exchange.xforce.ibmcloud.com/vulnerabilities/19195, https://savannah.gnu.org/bugs/?func=detailitem&item_id=8359
CVE-2004-0155
The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: racoon
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt, http://marc.info/?l=bugtraq&m=108136746911000&w=2, http://marc.info/?l=bugtraq&m=108369640424244&w=2
CVE-2004-1607
slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an invalid file parameter, which reveals the path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: saleslogix
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html, http://marc.info/?l=bugtraq&m=109811852218478&w=2, http://secunia.com/advisories/12883
CVE-2004-1910
rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to the GetPrivateProfileString function.  NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is acknowledged.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: security_check_virus_detection
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/019891.html, http://marc.info/?l=bugtraq&m=108136901406896&w=2, http://marc.info/?l=bugtraq&m=108143485021721&w=2
CVE-2004-2101
The sysinfo script in GeoHttpServer allows remote attackers to cause a denial of service (crash) via a long pwd parameter, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: geohttpserver
References: http://marc.info/?l=bugtraq&m=107480261825214&w=2, http://securitytracker.com/id?1008807, https://exchange.xforce.ibmcloud.com/vulnerabilities/14913
CVE-2004-2696
BEA WebLogic Server and WebLogic Express 6.1, 7.0, and 8.1, when using Remote Method Invocation (RMI) over Internet Inter-ORB Protocol (IIOP), does not properly handle when multiple logins for different users coming from the same client, which could cause an "unexpected user identity" to be used in an RMI call.
CVSS v2.0 Score: 5.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N
Affected Products: weblogic_server
Related CWEs: CWE-255
References: http://dev2dev.bea.com/pub/advisory/59, http://secunia.com/advisories/11865, http://securitytracker.com/id?1010493
CWE: CWE-255
CVE-2004-1334
Integer overflow in the ip_options_get function in the Linux kernel before 2.6.10 allows local users to cause a denial of service (kernel crash) via a cmsg_len that contains a -1, which leads to a buffer overflow.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, fedora_core, linux
References: http://marc.info/?l=bugtraq&m=110383108211524&w=2, http://www.guninski.com/where_do_you_want_billg_to_go_today_2.html, http://www.securityfocus.com/bid/11956
CVE-2004-0281
Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: resin
References: http://marc.info/?l=bugtraq&m=107635084830547&w=2, http://www.securityfocus.com/bid/9617, https://exchange.xforce.ibmcloud.com/vulnerabilities/15087
CVE-2004-0513
Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/May/msg00005.html, http://www.securityfocus.com/bid/10432, http://www.securitytracker.com/alerts/2004/May/1010329.html
CVE-2004-1911
Cross-site scripting (XSS) vulnerability in AzDGDatingLite 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) l parameter (aka language variable) to index.php or (2) id parameter to view.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: azdgdating
References: http://marc.info/?l=bugtraq&m=108144342317973&w=2, http://secunia.com/advisories/11326, http://www.osvdb.org/5018
CVE-2004-2346
Multiple cross-site scripting (XSS) vulnerabilities in Forum Web Server 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Subject field in post1.htm and (2) the File Description field in postfile2.htm.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: forum_web_server
References: http://www.securitytracker.com/alerts/2004/Feb/1008896.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15018, http://www.securitytracker.com/alerts/2004/Feb/1008896.html
CVE-2004-0779
The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firebird, mozilla, firefox
References: http://bugzilla.mozilla.org/show_bug.cgi?id=226278, http://www.mandriva.com/security/advisories?name=MDKSA-2004:082, http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
CVE-2004-0899
The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_nt
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-042, https://exchange.xforce.ibmcloud.com/vulnerabilities/18341, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2280
CVE-2004-2668
SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: interchange
References: http://ftp.icdevgroup.org/interchange/4.8/WHATSNEW, http://www.osvdb.org/7140, http://ftp.icdevgroup.org/interchange/4.8/WHATSNEW
CVE-2004-2334
Multiple cross-site scripting (XSS) vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via (1) a hex-encoded value to the variable parameter in emumail.fcgi, (2) the folder parameter in emumail.fcgi, or Javascript in the (3) username or (4) password field in the login page.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: emu_webmail
References: http://members.lycos.co.uk/r34ct/main/emu/emu.txt, http://secunia.com/advisories/11110, http://securitytracker.com/id?1009397
CVE-2004-1260
Multiple buffer overflows in the (1) write_heading function in subs.cpp or (2) trim_title function in parse.cpp for abctab2ps 1.6.3 allow remote attackers to execute arbitrary code via crafted ABC files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: abctab2ps
References: http://tigger.uic.edu/~jlongs2/holes/abctab2ps.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18583, https://exchange.xforce.ibmcloud.com/vulnerabilities/18584
CVE-2004-0468
Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: junos
References: http://www.jpcert.or.jp/at/2004/at040009.txt, http://www.kb.cert.org/vuls/id/658859, http://www.kb.cert.org/vuls/id/JSHA-6253CC
CVE-2004-0577
WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files from the root directory via a URL request to the wingate-internal directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wingate
References: http://marc.info/?l=full-disclosure&m=108872788123695&w=2, http://www.idefense.com/application/poi/display?id=113, https://exchange.xforce.ibmcloud.com/vulnerabilities/16589
CVE-2004-0963
Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: word
References: http://marc.info/?l=bugtraq&m=109716247230733&w=2, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-023, https://exchange.xforce.ibmcloud.com/vulnerabilities/17635
CVE-2004-2368
PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: opt-x
References: http://www.opt-x.org/index.php, http://www.securityfocus.com/bid/9732, http://www.zone-h.org/en/advisories/read/id=4036/
CVE-2004-2425
Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to execute arbitrary commands via accent (`) and possibly other shell metacharacters in the query string to virtualinput.cgi.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: 2110_network_camera, 2401_video_server, 230_mpeg2_video_server, 2400_video_server, 2490_serial_server
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0948.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1282.html, http://secunia.com/advisories/12353
CVE-2004-1756
BEA WebLogic Server and WebLogic Express 8.1 SP2 and earlier, and 7.0 SP4 and earlier, when using 2-way SSL with a custom trust manager, may accept a certificate chain even if the trust manager rejects it, which allows remote attackers to spoof other users or servers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_54.00.jsp, http://secunia.com/advisories/11358, http://securitytracker.com/id?1009765
CVE-2004-0554
Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: converged_communications_server, enterprise_linux, suse_linux, suse_email_server, modular_messaging_message_storage_server
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845, http://gcc.gnu.org/bugzilla/show_bug.cgi?id=15905, http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html
CVE-2004-1327
Buffer overflow in Crystal FTP Client 2.8 allows remote malicious servers to execute arbitrary code via a response to a LIST command that contains a file name with a long extension.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: crystal_ftp
References: http://marc.info/?l=bugtraq&m=110356203624337&w=2, http://secunia.com/advisories/13583/, http://www.securityfocus.com/bid/12038
CVE-2004-2021
Directory traversal vulnerability in file_manager.php in osCommerce 2.2 allows remote attackers to view arbitrary files via a .. (dot dot) in the filename argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: oscommerce
References: http://archives.neohapsis.com/archives/bugtraq/2005-03/0378.html, http://marc.info/?l=bugtraq&m=108482902101519&w=2, http://secunia.com/advisories/11624
CVE-2004-0437
Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service (crash) by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: titan_ftp_server
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0025.html, http://marc.info/?l=bugtraq&m=108378048513596&w=2, http://www.securiteam.com/windowsntfocus/5RP0215CUU.html
CVE-2004-1588
SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) QuestionNumber and Category parameters to Forum.asp or (2) Username and Password parameter to Login_Exec.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gosmart_message_board
References: http://marc.info/?l=bugtraq&m=109751522823011&w=2, http://secunia.com/advisories/12790/, http://www.securityfocus.com/bid/11361
CVE-2004-1034
Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kaffeine_player, gxine, linux
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/028061.html, http://secunia.com/advisories/13117/, http://security.gentoo.org/glsa/glsa-200411-14.xml
CVE-2004-0765
The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thunderbird, mozilla, firefox
References: http://bugzilla.mozilla.org/show_bug.cgi?id=234058, http://marc.info/?l=bugtraq&m=109900315219363&w=2, http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
CVE-2004-1508
init.php in WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webcalendar
References: http://marc.info/?l=bugtraq&m=110011618724455&w=2, http://secunia.com/advisories/13164, http://www.securityfocus.com/bid/11651
CVE-2004-2548
Multiple cross-site scripting (XSS) vulnerabilities in NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to inject arbitrary web script or HTML via (a) a URI containing the script, or (b) the username field in the login form.  NOTE: it is possible that the first attack vector is resultant from the error message issue (CVE-2004-2547).
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webmail, surgemail
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html, http://secunia.com/advisories/11772, http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt
CVE-2004-2161
SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tutos
References: http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/file/file_overview.php?r1=1.11.2.1&r2=1.11.2.2, http://secunia.com/advisories/12606/, http://secunia.com/advisories/18954
CVE-2004-0487
A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary programs.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: norton_antivirus
References: http://marc.info/?l=bugtraq&m=108515369718455&w=2, http://secunia.com/advisories/11676, http://www.ciac.org/ciac/bulletins/o-149.shtml
CVE-2004-1892
Stack-based buffer overflow in DecodeBase16 function, as used in the (1) IRC module and (2) web server in eMule 0.42d, allows remote attackers to execute arbitrary code via a long string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: emule
References: http://marc.info/?l=bugtraq&m=108100987429960&w=2, http://secunia.com/advisories/11289, http://www.emule-project.net/home/perl/news.cgi?l=1&cat_id=22
CVE-2004-2314
The Telnet listener for Novell iChain Server before 2.2 Field Patch 3b 2.2.116 does not have a password by default, which allows remote attackers to gain access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ichain
References: http://www.ciac.org/ciac/bulletins/o-080.shtml, http://www.securitytracker.com/alerts/2004/Feb/1008961.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15068
CVE-2004-1532
AppServ 2.5.x and earlier installs a default username and password, which allows remote attackers to gain access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: appserv
References: http://marc.info/?l=bugtraq&m=110079586328430&w=2, http://www.securityfocus.com/bid/11704, https://exchange.xforce.ibmcloud.com/vulnerabilities/18163
CVE-2004-0139
Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "t_unbind changes t_bind's behavior," has unknown impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040905-01-P.asc, http://secunia.com/advisories/12682, http://www.securityfocus.com/bid/11276
CVE-2004-1611
SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: saleslogix
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html, http://marc.info/?l=bugtraq&m=109811852218478&w=2, http://secunia.com/advisories/12883
CVE-2004-1394
The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunos, solaris
References: http://secunia.com/advisories/10755/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57453-1, http://www.auscert.org.au/render.html?it=3800
CVE-2004-2673
Multiple buffer overflows in ArGoSoft FTP Server before 1.4.1.6 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via (1) a SITE ZIP command with a long first or second argument, or (2) a SITE COPY with a long argument.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: ftp_server
References: http://secunia.com/advisories/11002, http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx, http://www.osvdb.org/11334
CVE-2004-1403
PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gnuboard
References: http://marc.info/?l=bugtraq&m=110313585810712&w=2, http://secunia.com/advisories/13479/, http://sir.co.kr/?doc=bbs/gnuboard.php&bo_table=pds&page=1&wr_id=1871
CVE-2004-0355
Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: invision_board
References: http://marc.info/?l=bugtraq&m=107850510428567&w=2, http://www.securityfocus.com/bid/9810, https://exchange.xforce.ibmcloud.com/vulnerabilities/15400
CVE-2004-2126
The upgrade for BlackICE PC Protection 3.6 and earlier sets insecure permissions for .INI files such as (1) blackice.ini, (2) firewall.ini, (3) protect.ini, or (4) sigs.ini, which allows local users to modify BlackICE configuration or possibly execute arbitrary code by exploiting vulnerabilities in the .INI parsers.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: blackice_pc_protection
References: http://marc.info/?l=bugtraq&m=107530966524193&w=2, http://www.securityfocus.com/bid/9513, http://marc.info/?l=bugtraq&m=107530966524193&w=2
CVE-2004-2672
Unspecified vulnerability in ArGoSoft FTP server before 1.4.2.2 allows attackers to upload .lnk files via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ftp_server
References: http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx, http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx
CVE-2004-0652
BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp, http://secunia.com/advisories/11359, http://securitytracker.com/id?1009766
CVE-2004-0204
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: business_solutions_crm, crystal_enterprise, crystal_reports, j_builder, weblogic_server
References: http://marc.info/?l=bugtraq&m=108360413811017&w=2, http://marc.info/?l=bugtraq&m=108671836127360&w=2, http://secunia.com/advisories/11800
CVE-2004-1293
Buffer overflow in the ReadFontTbl function in reader.c for rtf2latex2e 1.0fc2 allows remote attackers to execute arbitrary code via a crafted RTF file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rtf2latex2e
References: http://tigger.uic.edu/~jlongs2/holes/rtf2latex2e.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18559, http://tigger.uic.edu/~jlongs2/holes/rtf2latex2e.txt
CVE-2004-0830
The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 and earlier, and F-Secure Internet Gatekeeper 6.32 and earlier allow remote attackers to cause a denial of service (service crash due to unhandled exception) via a certain malformed packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: f-secure_anti-virus, f-secure_content_scanner_server, internet_gatekeeper
References: http://marc.info/?l=bugtraq&m=109483205925698&w=2, http://www.f-secure.com/security/fsc-2004-2.shtml, http://www.idefense.com/application/poi/display?id=137&type=vulnerabilities
CVE-2004-1883
Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or (2) may allow remote FTP administrators to execute arbitrary code by causing a long hostname or username to be inserted into a reply to a STAT command while a file is being transferred.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ws_ftp_server
References: http://marc.info/?l=bugtraq&m=108006553222397&w=2, http://secunia.com/advisories/11206, http://www.securityfocus.com/archive/1/358361
CVE-2004-1758
BEA WebLogic Server and WebLogic Express version 8.1 up to SP2, 7.0 up to SP4, and 6.1 up to SP6 may store the database username and password for an untargeted JDBC connection pool in plaintext in config.xml, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_53.00.jsp, http://secunia.com/advisories/11357, http://securitytracker.com/id?1009764
CVE-2004-2446
Directory traversal vulnerability in 1st Class Mail Server 4.01 allows remote attackers to read arbitrary files via a ".." (dot dot) sequences in unknown vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 1st_class_mail_server
References: http://members.lycos.co.uk/r34ct/main/1st%20Class%20mail%20server%204.01.txt, http://secunia.com/advisories/11330, http://securitytracker.com/alerts/2004/Apr/1009705.html
CVE-2004-2643
Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive.
CVSS v2.0 Score: 3.7 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P
Affected Products: cabarc
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0341.html, http://marc.info/?l=bugtraq&m=109759710121018&w=2, http://packetstormsecurity.org/0410-exploits/cabarc.txt
CVE-2004-0535
The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory.  NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: secure_community, suse_linux, suse_email_server, mandrake_multi_network_firewall, suse_linux_connectivity_server
References: ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc, http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125168, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000845
CVE-2004-2464
Directory traversal vulnerability in ADA Image Server (ImgSvr) 0.4 allows remote attackers to read arbitrary files or list directories via hex-encoded "..//" sequences ("%2e%2e%2f%2f").  NOTE: it was later reported that 0.6.21 and earlier is also affected.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imgsvr
References: http://members.lycos.co.uk/r34ct/main/ADA%20Image%20Server%20%28ImgSvr%29%200.4.txt, http://secunia.com/advisories/11287, http://www.osvdb.org/4946
CVE-2004-0659
Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mplayer
References: http://marc.info/?l=bugtraq&m=108844316930791&w=2, http://www.gentoo.org/security/en/glsa/glsa-200408-01.xml, http://www.securityfocus.com/bid/10615
CVE-2004-0157
x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xonix
References: http://secunia.com/advisories/11382, http://securitytracker.com/id?1009789, http://shellcode.org/Advisories/XONIX.txt
CVE-2004-0915
Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: viewcvs, debian_linux
References: http://www.debian.org/security/2004/dsa-605, https://exchange.xforce.ibmcloud.com/vulnerabilities/18369, http://www.debian.org/security/2004/dsa-605
CVE-2004-2565
Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administrative IP address restrictions have been modified from the default, allow remote authenticated users to read arbitrary files via (1) a "..\" (dot dot backslash) in the file parameter to showini.asp, or (2) an absolute path with drive letter in the log parameter to showlog.asp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sambar_server
References: http://secunia.com/advisories/11748, http://securitytracker.com/id?1010353, http://www.oliverkarow.de/research/sambar.txt
CVE-2004-0431
Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: quicktime
References: http://lists.apple.com/mhonarc/security-announce/msg00048.html, http://marc.info/?l=bugtraq&m=108360110618389&w=2, http://marc.info/?l=ntbugtraq&m=108356485013237&w=2
CVE-2004-1402
SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.php, (2) comments.php, or (3) the administrator login page.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: iwebnegar
References: http://marc.info/?l=bugtraq&m=110314454810163&w=2, http://www.securityfocus.com/bid/11946, https://exchange.xforce.ibmcloud.com/vulnerabilities/18505
CVE-2004-1142
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, propack, debian_linux, suse_linux, ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916, http://secunia.com/advisories/13468/, http://www.ciac.org/ciac/bulletins/p-061.shtml
CVE-2004-0551
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: catalyst_2926, catalyst_2902, catalyst_6000_ws-svc-nam-1, catos, catalyst_6000_ws-x6380-nam
References: http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml, http://www.kb.cert.org/vuls/id/245190, https://exchange.xforce.ibmcloud.com/vulnerabilities/16370
CVE-2004-2068
fetchnews in leafnode 1.9.47 and earlier allows remote attackers to cause a denial of service (process hang) via an empty NNTP news article with missing mandatory headers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: leafnode
References: http://leafnode.sourceforge.net/leafnode-SA-2004-01.txt, http://secunia.com/advisories/10590, http://www.derkeiler.com/Mailing-Lists/VulnWatch/2004-01/0009.html
CVE-2004-0723
Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/Key/Value" commands, aka "cross-site Java."
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: java_virtual_machine
References: http://marc.info/?l=bugtraq&m=108948405808522&w=2, http://www.securityfocus.com/bid/10688, https://exchange.xforce.ibmcloud.com/vulnerabilities/16666
CVE-2004-1339
SQL injection vulnerability in the (1) MDSYS.SDO_GEOM_TRIG_INS1 and (2) MDSYS.SDO_LRS_TRIG_INS default triggers in Oracle 9i and 10g allows remote attackers to execute arbitrary SQL commands via the new.table_name or new.column_name parameters.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: database_server, oracle9i
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://marc.info/?l=bugtraq&m=110382230614420&w=2, http://www.ngssoftware.com/advisories/oracle23122004I.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18655
CWE: CWE-89
CVE-2004-0565
Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mandrake_multi_network_firewall, secure_linux, mandrake_linux, mandrake_linux_corporate_server, linux
References: http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html, http://secunia.com/advisories/20162, http://secunia.com/advisories/20163
CVE-2004-0586
acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Download ActiveX methods.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: acprunner
References: http://marc.info/?l=bugtraq&m=108745652205176&w=2, http://www-306.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-54588, https://exchange.xforce.ibmcloud.com/vulnerabilities/16429
CVE-2004-0718
The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: firebird, mozilla, navigator
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://bugzilla.mozilla.org/show_bug.cgi?id=246448, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-2711
Multiple buffer overflows in Gyach Enhanced (Gyach-E) before 1.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to "avatar retrieval."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gyach_enhanced
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.osvdb.org/8972, http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php, http://www.osvdb.org/8972
CWE: CWE-119
CVE-2004-1472
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (device freeze) via a fast UDP port scan on the WAN interface.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: nexland_wavebase_firewall_appliance, firewall_vpn_appliance_200r, nexland_pro400_firewall_appliance, firewall_vpn_appliance_200, nexland_isb_soho_firewall_appliance
References: http://marc.info/?l=bugtraq&m=109588376426070&w=2, http://secunia.com/advisories/12635, http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html
CVE-2004-0978
Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: internet_explorer, windows_server_2003, windows_2000, windows_nt, windows_me
Related CWEs: CWE-787
References: http://marc.info/?l=bugtraq&m=110616221411579&w=2, http://www.kb.cert.org/vuls/id/673134, http://www.ngssoftware.com/advisories/heartbeatfull.txt
CWE: CWE-787
CVE-2004-2419
Keene Digital Media Server 1.0.2 allows local users to obtain usernames and passwords by reading the dmscore.db file on the local system.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: digital_media_server
References: http://secunia.com/advisories/12272, http://securitytracker.com/id?1010928, http://www.osvdb.org/8591
CVE-2004-2140
CRLF injection vulnerability in YaBB 1 Gold before 1.3.2 allows remote attackers to modify text file contents via the subject variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: yabb
References: http://secunia.com/advisories/12609/, http://www.yabbforum.com/community/YaBB.pl?board=general%3Baction=display%3Bnum=1093133233, http://secunia.com/advisories/12609/
CVE-2004-0639
Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: propack, squirrelmail, open_webmail
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=257973, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858, http://marc.info/?l=bugtraq&m=108611554415078&w=2
CVE-2004-1399
Directory traversal vulnerability in the Attachment module 2.3.10 and earlier for phpBB allows remote attackers to read arbitrary files via a .. (dot dot) in the filename.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: attachment_mod
References: http://marc.info/?l=bugtraq&m=110304269031484&w=2, http://secunia.com/advisories/13421/, http://www.securityfocus.com/bid/11893
CVE-2004-1648
Cross-site scripting (XSS) vulnerability in (1) index.asp, (2) ChangePassword.asp, (3) users_list.asp, (4) and users_add.asp in Password Protect allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: password_protect
References: http://marc.info/?l=bugtraq&m=109414967003192&w=2, http://secunia.com/advisories/12407, http://www.criolabs.net/advisories/passprotect.txt
CVE-2004-1541
SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: securecrt
References: http://marc.info/?l=bugtraq&m=110129164332226&w=2, http://secunia.com/advisories/13275/, http://www.securityfocus.com/bid/11731
CVE-2004-2395
Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mandrake_linux_corporate_server, mandrake_multi_network_firewall, mandrake_linux
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060, http://www.mandriva.com/security/advisories?name=MDKSA-2004:045, http://www.securityfocus.com/bid/10370
CVE-2004-2428
Abczone.it WWWguestbook 1.1 stores db/dbase.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the plaintext username and password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: wwwguestbook
References: http://securitytracker.com/id?1011026, http://www.osvdb.org/9159, https://exchange.xforce.ibmcloud.com/vulnerabilities/17077
CVE-2004-0111
gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, propack, gdk_pixbuf, linux_advanced_workstation, gdkpixbuf
References: http://www.debian.org/security/2004/dsa-464, http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:020, http://www.redhat.com/support/errata/RHSA-2004-102.html
CVE-2004-0691
Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: qt
References: http://marc.info/?l=bugtraq&m=109295309008309&w=2, http://security.gentoo.org/glsa/glsa-200408-20.xml, http://sunsolve.sun.com/search/document.do?assetkey=1-66-201610-1
CVE-2004-1454
Cisco IOS 12.0S, 12.2, and 12.3, with Open Shortest Path First (OSPF) enabled, allows remote attackers to cause a denial of service (device reload) via a malformed OSPF packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
References: http://secunia.com/advisories/12322, http://www.ciac.org/ciac/bulletins/o-199.shtml, http://www.cisco.com/warp/public/707/cisco-sa-20040818-ospf.shtml
CVE-2004-2287
Directory traversal vulnerability in explorer.php in DSM Light Web File Browser 2.0 allows remote attackers to read arbitrary files via .. (dot dot) in the wdir parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: light_web_file_browser
References: http://www.securityfocus.com/bid/10381, http://www.securityfocus.com/bid/10381
CVE-2004-0133
The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
References: ftp://patches.sgi.com/support/free/security/advisories/20040405-01-U.asc, http://marc.info/?l=bugtraq&m=108213675028441&w=2, http://secunia.com/advisories/11362
CVE-2004-1521
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: eudora
References: http://marc.info/?l=bugtraq&m=110037078519691&w=2, http://marc.info/?l=ntbugtraq&m=110053102601655&w=2, http://packetstormsecurity.nl/0411-exploits/eudora62014.txt
CVE-2004-0805
Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mandrake_linux_corporate_server, mpg123, mandrake_linux
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026151.html, http://www.alighieri.org/advisories/advisory-mpg123.txt, http://www.debian.org/security/2004/dsa-564
CVE-2004-0261
oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openjournal
References: http://marc.info/?l=bugtraq&m=107619136600713&w=2, http://www.grohol.com/downloads/oj/latest/changelog.txt, http://www.osvdb.org/3872
CVE-2004-0074
Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xsok
References: http://marc.info/?l=bugtraq&m=107307407027259&w=2, http://marc.info/?l=bugtraq&m=107332542918529&w=2, http://www.securityfocus.com/bid/9341
CVE-2004-2601
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files and possibly execute PHP code via a URL in the SKIN_inner parameter to inc/skin.php.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: help_center_live
References: http://secunia.com/advisories/13652, http://securitytracker.com/id?1012685, http://www.gulftech.org/?node=research&article_id=00058-12242004