DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1528
The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to (1) config.php, (2) index.php, or (3) submit.php, which reveal the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke_event_calendar
References: http://marc.info/?l=bugtraq&m=110064626111756&w=2, http://secunia.com/advisories/13213, http://www.securityfocus.com/bid/11693
CVE-2004-1329
Untrusted execution path vulnerability in the diag commands (1) lsmcode, (2) diag_exec, (3) invscout, and (4) invscoutd in AIX 5.1 through 5.3 allows local users to execute arbitrary programs by modifying the DIAGNOSTICS environment variable to point to a malicious Dctrl program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://marc.info/?l=bugtraq&m=110355931920123&w=2, http://www-1.ibm.com/support/search.wss?rs=0&q=IY64277&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY64389&apar=only
CVE-2004-1303
Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: yanf
References: http://tigger.uic.edu/~jlongs2/holes/yanf.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18615, http://tigger.uic.edu/~jlongs2/holes/yanf.txt
CVE-2004-1491
Opera 7.54 and earlier uses kfmclient exec to handle unknown MIME types, which allows remote attackers to execute arbitrary code via a shortcut or launcher that contains an Exec entry.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: suse_linux, opera_browser, kde, linux
References: http://lists.suse.com/archive/suse-security-announce/2005-Mar/0007.html, http://secunia.com/advisories/13447/, http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml
CVE-2004-0392
racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: racoon
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.10/SCOSA-2005.10.txt, http://orange.kame.net/dev/query-pr.cgi?pr=555, http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html
CVE-2004-2335
The Macromedia installers and e-licensing client on Mac OS X, as used for Macromedia Contribute 2, Director, Dreamweaver, Fireworks, Flash, and Studio, install the AuthenticationService setuid and writable by other users, which allows local users to gain privileges by modifying the program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: studio, contribute
References: http://secunia.com/advisories/11123, http://www.macromedia.com/devnet/security/security_zone/mpsb04-03.html, http://www.securityfocus.com/bid/9862
CVE-2004-2681
PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: matrixssl
References: http://www.matrixssl.org/archives/000076.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/40483, http://www.matrixssl.org/archives/000076.html
CVE-2004-2409
Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t update"), might allow attackers to execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: samhain
References: http://secunia.com/advisories/13130, http://securitytracker.com/id?1012142, http://www.osvdb.org/11525
CVE-2004-2132
Directory traversal vulnerability in PJreview_Neo.cgi in PJ CGI Neo review allows remote attackers to read arbitrary files via a ..  (dot dot) in the p parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pj_cgi_neo_review
References: http://marc.info/?l=bugtraq&m=107539804702913&w=2, http://www.osvdb.org/3746, http://www.secunia.com/advisories/10734/
CVE-2004-0412
Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mailman
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000842, http://mail.python.org/pipermail/mailman-announce/2004-May/000072.html, http://marc.info/?l=bugtraq&m=109034869927955&w=2
CVE-2004-0937
Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, etrust_ez_armor, etrust_intrusion_detection, rav_antivirus_desktop, brightstor_arcserve_backup
References: http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true, http://www.kb.cert.org/vuls/id/968818, http://www.securityfocus.com/bid/11448
CVE-2004-2187
Unknown vulnerability in ImagePage for MediaWiki 1.3.5, related to "filename validation," has unknown impact and attack vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mediawiki
References: http://sourceforge.net/project/shownotes.php?release_id=275099, http://www.securityfocus.com/bid/11416, http://sourceforge.net/project/shownotes.php?release_id=275099
CVE-2004-0399
Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: exim
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021015.html, http://secunia.com/advisories/11558, http://www.debian.org/security/2004/dsa-501
CVE-2004-2042
Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: e107
References: http://marc.info/?l=bugtraq&m=108588043007224&w=2, http://marc.info/?l=full-disclosure&m=108586723116427&w=2, http://secunia.com/advisories/11740
CVE-2004-0105
Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, propack, linux_advanced_workstation, metamail
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0041.html, http://marc.info/?l=bugtraq&m=107713476911429&w=2, http://secunia.com/advisories/10908
CVE-2004-2071
Macallan Mail Solution 2.8.4.6 (Build 260), and possibly earlier versions, allows remote attackers to bypass authentication in the web interface via an HTTP GET request with two slashes ("//") after the server name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mail_solution
References: http://secunia.com/advisories/10861, http://securitytracker.com/id?1009030, http://www.osvdb.org/3926
CVE-2004-1433
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, and ONS 15600 1.x(x), allows remote attackers to cause a denial of service (control card reset) via malformed (1) TCP and (2) UDP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: optical_networking_systems_software
References: http://secunia.com/advisories/12117, http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml, http://www.kb.cert.org/vuls/id/486224
CVE-2004-2602
PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCL_path parameter to pipe.php.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: help_center_live
References: http://secunia.com/advisories/13652, http://securitytracker.com/id?1012685, http://www.gulftech.org/?node=research&article_id=00058-12242004
CVE-2004-0842
Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "<STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: s3400, modular_messaging_message_storage_server, internet_explorer, s8100, definity_one_media_server
References: http://marc.info/?l=bugtraq&m=109107496214572&w=2, http://marc.info/?l=full-disclosure&m=109060455614702&w=2, http://marc.info/?l=full-disclosure&m=109102919426844&w=2
CVE-2004-2027
Buffer overflow in Icecast 2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a long Basic Authorization header that triggers an out-of-bounds read.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: icecast
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0378.html, http://secunia.com/advisories/11578, http://security.gentoo.org/glsa/glsa-200405-10.xml
CVE-2004-1364
Directory traversal vulnerability in extproc in Oracle 9i and 10g allows remote attackers to access arbitrary libraries outside of the $ORACLE_HOME\bin directory.
CVSS v2.0 Score: 8.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, oracle10g, oracle8i
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://marc.info/?l=bugtraq&m=110382406002365&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.0xdeadbeef.info/exploits/raptor_oraextproc.sql
CWE: CWE-22
CVE-2004-2591
The data-overwrite capability of ButtUglySoftware CleanCache 2.19 does not properly overwrite data in files, which allows attackers to recover the data.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cleancache
References: http://archives.neohapsis.com/archives/bugtraq/2004-12/0418.html, http://secunia.com/advisories/13630, http://securitytracker.com/id?1012701
CVE-2004-0082
The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: samba
References: http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt, http://www.ciac.org/ciac/bulletins/o-078.shtml, http://www.osvdb.org/3919
CVE-2004-1059
Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mnogosearch
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html, http://www.mikx.de/index.php?p=6, http://www.mnogosearch.org/history.html
CVE-2004-0046
Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' (double quote) character.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: snapstream_pvs
References: http://marc.info/?l=bugtraq&m=107350313917867&w=2, http://secunia.com/advisories/10575, http://securitytracker.com/id?1008646
CVE-2004-0158
Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lbreakout2
References: http://marc.info/?l=bugtraq&m=107755821705356&w=2, http://security.debian.org/pool/updates/main/l/lbreakout2/lbreakout2_2.2.2-1woody1.diff.gz, http://www.debian.org/security/2004/dsa-445
CVE-2004-2391
Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service a message with an empty <priority/> tag.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jabber_gadu-gadu_transport
References: http://secunia.com/advisories/10974/, http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429, http://www.securityfocus.com/bid/9710
CVE-2004-1550
Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obtain sensitive information by repeatedly making an HTTP request for ver.asp until an administrator logs on.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wr850g
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026791.html, http://marc.info/?l=bugtraq&m=109613135105800&w=2, http://www.securityfocus.com/bid/11241
CVE-2004-0908
Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Affected Products: thunderbird, mozilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=257523, http://marc.info/?l=bugtraq&m=109698896104418&w=2, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-1150
Stack-based buffer overflow in the in_cdda.dll plugin for Winamp 5.0 through 5.08c allows attackers to execute arbitrary code via a cda:// URL with a long (1) device name or (2) sound track number, as demonstrated with a .m3u or .pls playlist file.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: winamp
References: http://marc.info/?l=bugtraq&m=110684140108614&w=2, http://secunia.com/advisories/13781, http://www.nsfocus.com/english/homepage/research/0501.htm
CVE-2004-0185
Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: wu-ftpd
References: ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/skeychallenge.patch, http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txt, http://www.debian.org/security/2004/dsa-457
CVE-2004-1390
Multiple buffer overflows in the PPPoE daemon (PPPoEd) in QNX RTP 6.1 allow remote attackers to execute arbitrary code via a long argument to the (1) -F, (2) name, (3) en, (4) upscript, (5) downscript, (6) retries, (7) timeout, (8) scriptdetach, (9) noscript, (10) nodetach, (11) remote_mac, or (12) local_mac flags.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rtp, rtos
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0155.html, http://www.kb.cert.org/vuls/id/961686, http://www.rfdslabs.com.br/qnx-advs-01-2004.txt
CVE-2004-2186
SQL injection vulnerability in MediaWiki 1.3.5 allows remote attackers to execute arbitrary SQL commands via SpecialMaintenance.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mediawiki
References: http://sourceforge.net/project/shownotes.php?release_id=275099, http://www.securityfocus.com/bid/11416, http://sourceforge.net/project/shownotes.php?release_id=275099
CVE-2004-2251
The PPTP server in Astaro Security Linux before 4.024 provides information about its version, which makes it easier for remote attackers to construct specialized attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: security_linux
References: http://secunia.com/advisories/13089, http://securitytracker.com/id?1012065, http://www.astaro.org/showflat.php?Cat=&Number=51459&page=0&view=collapsed&sb=5&o=&fpart=1#51459
CVE-2004-0177
The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846, http://linux.bkbits.net:8080/linux-2.4/cset%404056b368s6vpJbGWxDD_LhQNYQrdzQ, http://marc.info/?l=bugtraq&m=108213675028441&w=2
CVE-2004-1158
Konqueror 3.x up to 3.2.2-6, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window or tab whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: konqueror, fedora_core, mandrake_linux
References: http://marc.info/?l=bugtraq&m=110296048613575&w=2, http://secunia.com/advisories/13254, http://secunia.com/advisories/13477
CVE-2004-0801
Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: java_desktop_system, linux, secure_linux, foomatic-filters
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.12/SCOSA-2005.12.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000880, http://lists.suse.com/archive/suse-security-announce/2006-May/0007.html
CVE-2004-1325
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: windows_media_player
References: http://marc.info/?l=bugtraq&m=110352518211306&w=2, http://www.securityfocus.com/bid/12032, https://exchange.xforce.ibmcloud.com/vulnerabilities/18587
CVE-2004-2573
PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to execute arbitrary PHP code via an external URL in the appdir parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgroupware
References: http://www.osvdb.org/7599, http://www.securityfocus.com/bid/12074, https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478
CVE-2004-0599
Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: libpng
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856, http://lists.apple.com/mhonarc/security-announce/msg00056.html
CVE-2004-2758
Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of service (segmentation fault and process crash), as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sunforum
References: http://secunia.com/advisories/10665, http://securitytracker.com/id?1008749, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101429-1
CVE-2004-2641
Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to cause a denial of service (system controller hang) via IP Packets With Type of Service (TOS) Bits set.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netra_1280, sun_fire
References: http://secunia.com/advisories/11439, http://securitytracker.com/id?1009888, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57544-1
CVE-2004-1104
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute, and a FORM whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ie
References: http://secunia.com/advisories/11273, http://www.kb.cert.org/vuls/id/702086, http://www.securityfocus.com/archive/1/379903
CVE-2004-2760
sshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection after a root login attempt with the correct password, but leaves the connection open after an attempt with an incorrect password, which makes it easier for remote attackers to guess the password by observing the connection state, a different vulnerability than CVE-2003-0190.  NOTE: it could be argued that in most environments, this does not cross privilege boundaries without requiring leverage of a separate vulnerability.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: openssh
Related CWEs: CWE-16
References: http://archive.cert.uni-stuttgart.de/bugtraq/2004/04/msg00162.html, http://securityreason.com/securityalert/4100, http://www.securityfocus.com/archive/1/360198
CWE: CWE-16
CVE-2004-2294
Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences in the text parameter, which is checked for dangerous sequences before it is canonicalized, leading to a cross-site scripting (XSS) vulnerability.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://secunia.com/advisories/11852, http://www.osvdb.org/6999, http://www.securityfocus.com/archive/1/365865
CVE-2004-0789
Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 2110_network_camera, 2401_video_server, wingate, 2420_network_camera, 2400_video_server
References: http://secunia.com/advisories/13145, http://securitytracker.com/id?1012157, http://www.niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en
CVE-2004-2340
** UNVERIFIABLE **  SQL injection vulnerability in PunkBuster Screenshot Database (PB-DB) Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form.  NOTE: the original vulnerability report contains several significant inconsistencies that make it unclear whether the report is accurate, including (1) PB-DB is really the "PunkBuster Screenshot Database" and not "PunkBuster" itself; (2) there is no apparent association between PunkBuster and "Punky Brewster"; (3) the claimed source code is not anywhere in Alpha 6.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: punkbuster_database
References: http://securitytracker.com/id?1009145, http://www.osvdb.org/18981, http://www.securityfocus.com/archive/1/354453
CVE-2004-0517
Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different vulnerability than CVE-2004-0516.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html, http://securitytracker.com/id?1010331, http://www.securityfocus.com/bid/10432
CVE-2004-1223
The Management Agent in F-Secure Policy Manager 5.11.2810 allows remote attackers to gain sensitive information, such as the absolute path for the web server, via an HTTP request to fsmsh.dll without any parameters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: policy_manager
References: http://marc.info/?l=bugtraq&m=110262921306862&w=2, http://www.oliverkarow.de/research/f-secure.txt, http://www.securityfocus.com/bid/11869
CVE-2004-1788
ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: asp-nuke
References: http://www.securityfocus.com/bid/9355, http://www.securityfocus.com/bid/9355
CVE-2004-1440
Multiple heap-based buffer overflows in the modpow function in PuTTY before 0.55 allow (1) remote attackers to execute arbitrary code via an SSH2 packet with a base argument that is larger than the mod argument, which causes the modpow function to write memory before the beginning of its buffer, and (2) remote malicious servers to cause a denial of service (client crash) and possibly execute arbitrary code via a large bignum during authentication.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: putty
References: http://marc.info/?l=bugtraq&m=109167869528138&w=2, http://secunia.com/advisories/12212/, http://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
CVE-2004-2607
A numeric casting discrepancy in sdla_xfer in Linux kernel 2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1 allows local users to read portions of kernel memory via a large len argument, which is received as an int but cast to a short, which prevents a read loop from filling a buffer.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
References: http://secunia.com/advisories/18977, http://secunia.com/advisories/19369, http://www.debian.org/security/2006/dsa-1018
CVE-2004-2127
Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_blog
References: http://marc.info/?l=bugtraq&m=107531194527602&w=2, http://secunia.com/advisories/10740, http://www.osvdb.org/3739
CVE-2004-1317
Stack-based buffer overflow in doexec.c in Netcat for Windows 1.1, when running with the -e option, allows remote attackers to execute arbitrary code via a long DNS command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netcat
References: http://marc.info/?l=bugtraq&m=110425875504586&w=2, http://marc.info/?l=bugtraq&m=110426936423890&w=2, http://marc.info/?l=bugtraq&m=110429204712327&w=2
CVE-2004-0460
Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dns_one_appliance, suse_linux, suse_email_server, suse_linux_connectivity_server, mandrake_linux
References: http://marc.info/?l=bugtraq&m=108795911203342&w=2, http://marc.info/?l=bugtraq&m=108843959502356&w=2, http://marc.info/?l=bugtraq&m=108938625206063&w=2
CVE-2004-0543
Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: e-business_suite, applications
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0032.html, http://marc.info/?l=bugtraq&m=108638417302229&w=2, http://otn.oracle.com/deploy/security/pdf/2004alert67.pdf
CVE-2004-0069
Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_ftp_server
References: http://marc.info/?l=bugtraq&m=107367110805273&w=2, http://marc.info/?l=bugtraq&m=107401398014761&w=2, http://www.securityfocus.com/bid/9385
CVE-2004-1698
The Base64 function in PopMessenger 1.60 (before 20 Sep 2004) and earlier allows remote attackers to cause a denial of service (application crash) via invalid characters in a message, which causes several alert dialogs to be displayed and leads to a crash.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: popmessenger
References: http://marc.info/?l=bugtraq&m=109581586128899&w=2, http://secunia.com/advisories/12612/, http://www.securityfocus.com/bid/11230
CVE-2004-1942
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: patch_manager
References: http://marc.info/?l=bugtraq&m=108241638500417&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57554-1, http://www.ciac.org/ciac/bulletins/o-144.shtml
CVE-2004-2471
SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quoteengine
References: http://secunia.com/advisories/11255, http://sourceforge.net/project/shownotes.php?release_id=227554, http://www.securityfocus.com/bid/10017
CVE-2004-2605
aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: astats
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604, http://secunia.com/advisories/13679, http://shellcode.org/pipermail/debian-audit/2004-December/000078.html
CVE-2004-1389
Unknown vulnerability in the Veritas NetBackup Administrative Assistant interface for NetBackup BusinesServer 3.4, 3.4.1, and 4.5, DataCenter 3.4, 3.4.1, and 4.5, Enterprise Server 5.1, and NetBackup Server 5.0 and 5.1, allows attackers to execute arbitrary commands via the bpjava-susvc process, possibly related to the call-back feature.
CVSS v2.0 Score: 6.0 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:S/C:C/I:C/A:C
Affected Products: netbackup
References: http://secunia.com/advisories/12901/, http://seer.support.veritas.com/docs/271727.htm, http://www.ciac.org/ciac/bulletins/p-020.shtml
CVE-2004-2530
Visual truncation vulnerability in Gadu-Gadu allows remote attackers to spoof the file extension on transmitted files via a filename with a large number of spaces followed by the real extension, which is not displayed in the dialog box.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: gadu-gadu_instant_messenger
References: http://seclists.org/lists/vuln-dev/2004/Aug/0007.html, http://securitytracker.com/id?1011037, http://www.osvdb.org/9162
CVE-2004-1581
BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to (1) checkdb.inc.php, (2) admin.inc.php or (3) cp.inc.php, which reveals the path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: blackboard
References: http://marc.info/?l=bugtraq&m=109707701719659&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17636, http://marc.info/?l=bugtraq&m=109707701719659&w=2
CVE-2004-1211
Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8) FETCH, (9) RENAME, (10) DELETE, (11) LIST, (12) SEARCH, (13) CREATE, or (14) UNSUBSCRIBE commands.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mercury
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://home.kabelfoon.nl/~jaabogae/han/m_401b.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/029701.html, http://marc.info/?l=bugtraq&m=110193702909991&w=2
CWE: CWE-119
CVE-2004-2172
EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via a chosen plaintext attack.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: productcart
Related CWEs: CWE-326
Related CAPECs: CAPEC-112, CAPEC-192, CAPEC-20
MITRE ATT&CK Techniques: T1110
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html, http://secunia.com/advisories/10898
CWE: CWE-326
MITRE ATT&CK techniques: T1110
CVE-2004-1501
The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) by sending a POST request with a large Content-Length value, then disconnecting without sending that amount of data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 602lan_suite
References: http://marc.info/?l=bugtraq&m=109976745017459&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17977, http://marc.info/?l=bugtraq&m=109976745017459&w=2
CVE-2004-2631
Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote attackers to execute arbitrary PHP code via a crafted table name.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpmyadmin
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0444.html, http://archives.neohapsis.com/archives/bugtraq/2004-06/0473.html, http://eagle.kecapi.com/sec/fd/phpMyAdmin.html
CVE-2004-0486
HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x_server, mac_os_x
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html, http://lists.apple.com/mhonarc/security-announce/msg00053.html, http://secunia.com/advisories/11622/
CVE-2004-1106
Cross-site scripting (XSS) vulnerability in Gallery 1.4.4-pl3 and earlier allows remote attackers to execute arbitrary web script or HTML via "specially formed URLs," possibly via the include parameter in index.php.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: gallery, linux
References: http://g3cko.info/gallery2-4.patch, http://gallery.menalto.com/modules.php?op=modload&name=News&file=article&sid=142&mode=thread&order=0&thold=0, http://www.debian.org/security/2005/dsa-642
CVE-2004-2779
id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd number of bytes, triggering an endless loop allocating memory until an OOM condition is reached, leading to denial-of-service (DoS).
CVSS v3.0 Score: 7.5 (HIGH)
CVSS v3.0 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: libid3tag
Related CWEs: CWE-399
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=304913, https://bugzilla.gnome.org/show_bug.cgi?id=162647, https://sources.debian.org/patches/libid3tag/0.15.1b-13/10_utf16.dpatch/
CWE: CWE-399
CVE-2004-1790
Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary web script or HTML via the URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: full_rate_adsl_router
References: http://secunia.com/advisories/10576, http://securitytracker.com/id?1008643, http://www.osvdb.org/3435
CVE-2004-0527
KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: konqueror
References: http://www.osvdb.org/6579, http://www.securityfocus.com/bid/10383, https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
CVE-2004-0782
Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow.  NOTE: this identifier is ONLY for gtk+.  It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gtk, gdkpixbuf
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000875, http://marc.info/?l=bugtraq&m=109528994916275&w=2, http://scary.beasts.org/security/CESA-2004-005.txt
CVE-2004-1674
viewaction.html in Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to (1) delete arbitrary files via the originalfolder parameter or (2) move arbitrary files via the messageid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_mail, mail_server
References: http://marc.info/?l=bugtraq&m=109483971420067&w=2, http://secunia.com/advisories/12789, http://www.securityfocus.com/bid/11371
CVE-2004-1533
Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service (service crash) via a long (1) username or (2) password.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pop3_server
References: http://marc.info/?l=bugtraq&m=110081437508585&w=2, http://secunia.com/advisories/13248, http://www.digitalmapping.sk.ca/pop3srv/Update.asp
CVE-2004-0847
The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability."
CVSS v3.0 Score: 9.8 (CRITICAL)
CVSS v3.0 Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: asp.net
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://archives.neohapsis.com/archives/ntbugtraq/2004-q3/0221.html, http://sourceforge.net/mailarchive/forum.php?thread_id=5671607&forum_id=24754, http://www.kb.cert.org/vuls/id/283646
CWE: CWE-22
CVE-2004-0422
flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: flim
References: http://www.debian.org/security/2004/dsa-500, http://www.redhat.com/support/errata/RHSA-2004-344.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/16027
CVE-2004-1990
Aldo's Web Server (aweb) 1.5 allows remote attackers to gain sensitive information via an arbitrary character, which reveals the full path and the user running the aweb process, possibly due to a malformed request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aldos_web_server
References: http://marc.info/?l=bugtraq&m=108360629031227&w=2, http://secunia.com/advisories/11542, http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt
CVE-2004-1899
The administration interface in Monit 1.4 through 4.2 allows remote attackers to cause an off-by-one overflow via a POST that contains 1024 bytes.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: monit
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0076.html, http://marc.info/?l=bugtraq&m=108119149103696&w=2, http://secunia.com/advisories/11304
CVE-2004-2171
Cross-site scripting (XSS) vulnerability in Cherokee before 0.4.8 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly quoted in the resulting error page.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: cherokee_httpd
References: http://secunia.com/advisories/10701/, http://www.osvdb.org/3707, http://www.securityfocus.com/bid/9496
CVE-2004-1691
The Web Server in DNS4Me 3.0.0.4 allows remote attackers to cause a denial of service (CPU consumption and crash) via a large amount of data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dns4me
References: http://marc.info/?l=bugtraq&m=109552436811493&w=2, http://secunia.com/advisories/12595, http://securitytracker.com/id?1011334
CVE-2004-1666
Buffer overflow in the MSN module in Trillian 0.74i allows remote MSN servers to execute arbitrary code via a long string that ends in a newline character.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: trillian
References: http://marc.info/?l=bugtraq&m=109466618609375&w=2, http://secunia.com/advisories/12487, http://unsecure.altervista.org/security/trillian.htm
CVE-2004-0606
Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP request.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: dns_one_appliance
References: http://marc.info/?l=bugtraq&m=108769996925349&w=2, http://www.securityfocus.com/bid/10573, https://exchange.xforce.ibmcloud.com/vulnerabilities/16456
CVE-2004-1725
Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xv
References: http://marc.info/?l=bugtraq&m=109302498125092&w=2, http://www.securityfocus.com/bid/10985, https://exchange.xforce.ibmcloud.com/vulnerabilities/17053
CVE-2004-2089
Matrix FTP Server allows remote attackers to cause a denial of service (crash) by logging in using four spaces as the username and password and then issuing a LIST command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: matrix_ftp_server
References: http://securitytracker.com/id?1008970, https://exchange.xforce.ibmcloud.com/vulnerabilities/15075, http://securitytracker.com/id?1008970
CVE-2004-1420
Multiple cross-site scripting (XSS) vulnerabilities in header.php in WHM AutoPilot 2.4.6.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) site_title or (2) http_images parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: autopilot
References: http://marc.info/?l=bugtraq&m=110425620105529&w=2, http://marc.info/?l=bugtraq&m=110451997904494&w=2, http://secunia.com/advisories/13673
CVE-2004-0485
The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mac_os_x
References: http://fundisom.com/owned/warning, http://lists.apple.com/mhonarc/security-announce/msg00053.html, http://lists.seifried.org/pipermail/security/2004-May/003743.html
CVE-2004-2666
Mantis before 20041016 provides a complete Issue History (Bug History) in the web interface regardless of view_history_threshold, which allows remote attackers to obtain sensitive information (private bug details) by visiting a bug's web page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mantis
References: http://bugs.mantisbugtracker.com/view.php?id=4724, http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?r1=1.24&r2=1.25, http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/history_inc.php?view=log
CVE-2004-2476
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IFRAME with "?" as the file source.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: internet_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2004-04/0061.html, http://archives.neohapsis.com/archives/bugtraq/2004-04/0080.html, http://www.securityfocus.com/bid/10073
CVE-2004-2692
The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: php-exec-dir
Related CWEs: CWE-16, CWE-264
References: http://kyberdigi.cz/projects/execdir/english.html, http://seclists.org/fulldisclosure/2004/Jul/0347.html, http://seclists.org/fulldisclosure/2004/Jul/0350.html
CWE: CWE-16, CWE-264