DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0935
Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, etrust_ez_armor, etrust_intrusion_detection, rav_antivirus_desktop, brightstor_arcserve_backup
References: http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true, http://www.kb.cert.org/vuls/id/968818, http://www.securityfocus.com/bid/11448
CVE-2004-2628
Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers to read arbitrary files via a URL that contains (1) a hex-encoded backslash dot-dot sequence ("%5C..") or (2) a drive letter (such as "C:").
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: thttpd
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0097.html, http://marc.info/?l=bugtraq&m=109164010629836&w=2, http://securitytracker.com/alerts/2004/Aug/1010850.html
CVE-2004-2587
login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, possibly due to a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: smartermail
References: http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt, http://secunia.com/advisories/11042, http://www.zone-h.org/advisories/read/id=4098
CVE-2004-1919
The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service (crash) via large malformed strings.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: crackalaka
References: http://marc.info/?l=bugtraq&m=108152479316967&w=2, http://secunia.com/advisories/11340, http://www.securityfocus.com/bid/10092
CVE-2004-1419
PHP remote file inclusion vulnerability in ZeroBoard 4.1pl4 and earlier allows remote attackers to execute arbitrary PHP code by modifying the (1) _zb_path parameter to outlogin.php or (2) dir parameter to write.php to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: zeroboard
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030224.html, http://marc.info/?l=bugtraq&m=110391024404947&w=2, http://secunia.com/advisories/13649
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2004-1054
Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY64820&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY64852&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY64976&apar=only
CVE-2004-2571
Multiple buffer overflows in EnderUNIX isoqlog 2.1.1 allow remote attackers to execute arbitrary code via the (1) parseQmailFromBytesLine, (2) parseQmailToRemoteLine, (3) parseQmailToLocalLine, (4) parseSendmailFromBytesLine, (5) parseSendmailToLine, (6) parseEximFromBytesLine, and (7) parseEximToLine functions in Parser.c; allow local users to execute arbitrary code via the (8) lowercase and (9) check_syslog_date functions in Parser.c, and (10) unspecified functions in Dir.c; and allow unspecified attackers to execute arbitrary code via the (11) loadconfig and (12) removespaces functions in loadconfig.c, the (13) loadLang function in LangCfg.c, and (14) unspecified functions in Html.c.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: isoqlog
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0298.html, http://secunia.com/advisories/11741/, http://securitytracker.com/id?1010292
CVE-2004-2553
The Ignition Project ignitionServer 0.1.2 through 0.1.2-R2 allows remote authenticated users with local IRC operator privileges to obtain global IRC operator privileges by using the unofficial umode command with the +ORD argument.
CVSS v2.0 Score: 6.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Affected Products: ignitionserver
References: http://cvs.sourceforge.net/viewcvs.py/ignition/ignitionserver/docs/security/20040302-operator-privilege-escalation.txt?view=markup, http://secunia.com/advisories/11017, http://securitytracker.com/id?1009301
CVE-2004-0452
Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:P
Affected Products: perl
References: ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U, http://fedoranews.org/updates/FEDORA--.shtml, http://marc.info/?l=bugtraq&m=110547693019788&w=2
CVE-2004-1617
Lynx, lynx-ssl, and lynx-cur before 2.8.6dev.8 allow remote attackers to cause a denial of service (infinite loop) via a web page or HTML email that contains invalid HTML including (1) a TEXTAREA tag with a large COLS value and (2) a large tag name in an element that is not terminated, as demonstrated by mangleme.  NOTE: a followup suggests that the relevant trigger for this issue is the large COLS value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lynx
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://lcamtuf.coredump.cx/mangleme/gallery/, http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html, http://marc.info/?l=bugtraq&m=109811406620511&w=2
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-1574
Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vypres_messenger
References: http://aluigi.altervista.org/adv/vymesbof-adv.txt, http://marc.info/?l=bugtraq&m=109665993315769&w=2, http://secunia.com/advisories/12605
CVE-2004-2091
Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: baseline_security_analyzer
References: http://www.securityfocus.com/archive/1/353324, http://www.securityfocus.com/bid/9634, http://www.securityfocus.com/archive/1/353324
CVE-2004-1818
Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: 4nalbum_module
References: http://marc.info/?l=bugtraq&m=107937780222514&w=2, http://secunia.com/advisories/11134, http://www.osvdb.org/4293
CVE-2004-1719
Multiple cross-site scripting (XSS) vulnerabilities in Merak Webmail Server 5.2.7 allow remote attackers to inject arbitrary web script or HTML via the (1) category, (2) cserver, (3) ext, (4) global, (5) showgroups, (6) or showlite parameters to address.html, or the (7) spage or (8) autoresponder parameters to settings.html, the (9) folder parameter to readmail.html, or the (10) attachmentpage_text_error parameter to attachment.html, (11) folder, (12) ct, or (13) cv parameters to calendar.html, (14) an <img> tag, or (15) the subject of an e-mail message.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mail_server
References: http://marc.info/?l=bugtraq&m=109279057326044&w=2, http://packetstormsecurity.nl/0408-exploits/merak527.txt, http://secunia.com/advisories/12269
CVE-2004-2674
Directory traversal vulnerability in ArGoSoft FTP Server before 1.4.1.6 allows remote authenticated users to determine the existence of arbitrary files via ".." sequences in the SITE UNZIP argument.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:N/A:N
Affected Products: ftp_server
References: http://secunia.com/advisories/11002, http://www.argosoft.com/rootpages/FtpServer/ChangeList.aspx, http://www.osvdb.org/11333
CVE-2004-1282
Buffer overflow in the strexpand function in string.c for LinPopUp 1.2.0 allows remote attackers to execute arbitrary code via a crafted message that is not properly handled during a Reply operation.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linpopup
References: http://tigger.uic.edu/~jlongs2/holes/linpopup.txt, http://www.debian.org/security/2005/dsa-632, https://exchange.xforce.ibmcloud.com/vulnerabilities/18627
CVE-2004-1038
A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit.  NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: firewire_ieee
References: http://it.slashdot.org/article.pl?sid=08/03/04/1258210, http://marc.info/?l=bugtraq&m=109881362530790&w=2, http://md.hudora.de/presentations/firewire/2005-firewire-cansecwest.pdf
CVE-2004-1669
Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: web_mail, mail_server
References: http://marc.info/?l=bugtraq&m=109483971420067&w=2, http://secunia.com/advisories/12789, http://www.securityfocus.com/bid/11371
CVE-2004-0228
Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852, http://fedoranews.org/updates/FEDORA-2004-111.shtml, http://secunia.com/advisories/11429
CVE-2004-1374
Multiple buffer overflows in NetBSD kernel may allow local users to execute arbitrary code and gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: netbsd
References: http://gleg.net/advisory_netbsd2.shtml, http://gleg.net/advisory_netbsd2.shtml
CVE-2004-0903
Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, thunderbird, mozilla, suse_linux, linux
References: http://bugzilla.mozilla.org/show_bug.cgi?id=257314, http://marc.info/?l=bugtraq&m=109698896104418&w=2, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-0906
The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: thunderbird, mozilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=231083, http://bugzilla.mozilla.org/show_bug.cgi?id=235781, http://secunia.com/advisories/12526/
CVE-2004-1693
PHP remote file inclusion vulnerability in Function.php in Mambo 4.5 (1.0.9) allows remote attackers to execute arbitrary PHP code by modifying the mosConfig_absolute_path parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mambo
References: http://marc.info/?l=bugtraq&m=109571849713158&w=2, http://securitytracker.com/id?1011365, http://www.osvdb.org/10180
CVE-2004-2139
Unknown vulnerability in Adminedit.pl YaBB 1 Gold before 1.3.2 allows attackers to execute arbitrary code via settings.pl.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: yabb
References: http://secunia.com/advisories/12609/, http://www.osvdb.org/10222, http://www.securityfocus.com/bid/11235
CVE-2004-1965
Multiple cross-site scripting (XSS) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) redirect parameter to member.php, (2) to parameter to myhome.php (3) TID parameter to post.php, or (4) redirect parameter to index.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: openbb
References: http://marc.info/?l=bugtraq&m=108301983206107&w=2, http://secunia.com/advisories/11481, http://securitytracker.com/id?1009935
CVE-2004-0616
The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: voyager_2000_wireless_adsl_router
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0710.html, http://marc.info/?l=bugtraq&m=108794963119034&w=2, http://www.securityfocus.com/bid/10589
CVE-2004-0184
Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tcpdump
Related CWEs: CWE-125, CWE-191
Related CAPECs: CAPEC-540
References: http://marc.info/?l=bugtraq&m=108067265931525&w=2, http://secunia.com/advisories/11258, http://securitytracker.com/id?1009593
CWE: CWE-125, CWE-191
CVE-2004-0168
Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html, http://secunia.com/advisories/10959/, https://exchange.xforce.ibmcloud.com/vulnerabilities/15299
CVE-2004-0326
Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: professional_gatekeeper
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017703.html, http://marc.info/?l=bugtraq&m=107755692400728&w=2, http://www.securityfocus.com/bid/9716
CVE-2004-2461
Buffer overflow in pop3.c in gnubiff before 2.0.0 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gnubiff
References: http://gnubiff.sourceforge.net/changelog.php, http://secunia.com/advisories/12445, http://www.osvdb.org/9731
CVE-2004-2510
Cross-site scripting (XSS) vulnerability in showflat.php in Infopop UBB.Threads before 6.5 allows remote attackers to inject arbitrary web script or HTML via the Cat parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: ubb.threads
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0239.html, http://secunia.com/advisories/13452, http://securitytracker.com/id?1012503
CVE-2004-1738
Cross-site scripting (XSS) vulnerability in page.php in JShop allows remote attackers to inject arbitrary web script or HTML via the xPage parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: jshop_server
References: http://indohack.sourceforge.net/drponidi/jshop-vuln.txt, http://marc.info/?l=bugtraq&m=109327547026265&w=2, http://secunia.com/advisories/12345
CVE-2004-2644
Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: asn.1_compiler
References: http://secunia.com/advisories/12794, http://securitytracker.com/id?1011622, http://sourceforge.net/project/shownotes.php?group_id=103893&release_id=274592
CVE-2004-1747
Cross-site scripting (XSS) vulnerability in NetworkEverywhere NR041 running firmware 1.2 Release 03 allows remote attackers to inject arbitrary web script or HTML via the DHCP HOSTNAME option.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: nr041
References: http://marc.info/?l=bugtraq&m=109344996523392&w=2, http://www.securityfocus.com/bid/11046, https://exchange.xforce.ibmcloud.com/vulnerabilities/17120
CVE-2004-1203
parser.php in phpCMS 1.2.1 and earlier, with non-stealth and debug modes enabled, allows remote attackers to gain sensitive information via an invalid file parameter, which reveals the web server's installation path.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpcms
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029499.html, http://marc.info/?l=bugtraq&m=110149207123510&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18272
CVE-2004-1130
Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as (1) username, (2) name, or (3) comments.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: cmailserver
References: http://marc.info/?l=bugtraq&m=110137313329955&w=2, http://www.security.org.sg/vuln/cmailserver52.html, http://www.securityfocus.com/bid/11742
CVE-2004-0278
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: leadfoot, dirt_track_racing_australia, world_of_outlaws_sprint_cars, dirt_track_racing, dirt_track_racing_sprint_cars
References: http://marc.info/?l=bugtraq&m=107655269820530&w=2, http://www.securityfocus.com/bid/9644, https://exchange.xforce.ibmcloud.com/vulnerabilities/15188
CVE-2004-0843
Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ie, internet_explorer
References: http://www.kb.cert.org/vuls/id/625616, http://www.us-cert.gov/cas/techalerts/TA04-293A.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038
CVE-2004-2633
Unspecified vulnerability in Sesamie 1.0 allows remote anonymous attackers to gain access to repositories of other users via unknown vectors.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: sesame_rdf_container
References: http://secunia.com/advisories/11497, http://securitytracker.com/alerts/2004/Apr/1009978.html, http://sourceforge.net/project/shownotes.php?release_id=234477
CVE-2004-0180
The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: cvs
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:07.cvs.asc, ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/002_cvs.patch, ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc
CVE-2004-0524
Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: change_passwd
References: http://marc.info/?l=bugtraq&m=108222863917958&w=2, http://marc.info/?l=bugtraq&m=108311782032370&w=2, http://secunia.com/advisories/11415
CVE-2004-2016
Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary code via a long GET request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: subnet_chat_application
References: http://marc.info/?l=bugtraq&m=108481422130354&w=2, http://secunia.com/advisories/11637, http://www.securityfocus.com/bid/10353
CVE-2004-1799
PF in certain OpenBSD versions, when stateful filtering is enabled, does not limit packets for a session to the original interface, which allows remote attackers to bypass intended packet filters via spoofed packets to other interfaces.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd
References: http://marc.info/?l=full-disclosure&m=107331321302113&w=2, http://www.osvdb.org/19105, http://www.securityfocus.com/bid/9362
CVE-2004-1263
changepassword.cgi in ChangePassword 0.8, when installed setuid, allows local users to execute arbitrary code by modifying the PATH environment variable to point to a malicious "make" program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: changepassword
References: http://tigger.uic.edu/~jlongs2/holes/changepassword.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18593, http://tigger.uic.edu/~jlongs2/holes/changepassword.txt
CVE-2004-0153
Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain error messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: emil
References: http://marc.info/?l=bugtraq&m=108024939827236&w=2, http://www.debian.org/security/2004/dsa-468, https://exchange.xforce.ibmcloud.com/vulnerabilities/15602
CVE-2004-1640
Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the (1) terme parameter to search.php or (2) letter parameter to letter.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: xoops_dictionary
References: http://cyruxnet.org/modulo_dic_xoops.htm, http://marc.info/?l=bugtraq&m=109394077209963&w=2, http://secunia.com/advisories/12424
CVE-2004-1235
Race condition in the (1) load_elf_library and (2) binfmt_aout function calls for uselib in Linux kernel 2.4 through 2.429-rc2 and 2.6 through 2.6.10 allows local users to execute arbitrary code by manipulating the VMA descriptor.
CVSS v2.0 Score: 6.2 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, mandrake_multi_network_firewall, modular_messaging_message_storage_server, s8500, fedora_core
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930, http://isec.pl/vulnerabilities/isec-0021-uselib.txt, http://marc.info/?l=bugtraq&m=110512575901427&w=2
CVE-2004-0366
SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: pam-pgsql
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://secunia.com/advisories/11237, http://www.debian.org/security/2004/dsa-469, http://www.securityfocus.com/bid/10266
CWE: CWE-89
CVE-2004-1093
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "use of already freed memory."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, midnight_commander, debian_linux, suse_linux, linux
References: http://secunia.com/advisories/13863/, http://www.debian.org/security/2005/dsa-639, http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE-2004-2695
SQL injection vulnerability in the Authorize.net callback code (subscriptions/authorize.php) in Jelsoft vBulletin 3.0 through 3.0.3 allows remote attackers to execute arbitrary SQL statements via the x_invoice_num parameter.  NOTE: this issue might be related to CVE-2006-4267.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: point-to-point_protocol, vbulletin
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://secunia.com/advisories/12531/, http://www.securiteam.com/unixfocus/5BP0E15E0M.html, http://www.securityfocus.com/bid/11193
CWE: CWE-89
CVE-2004-0398
Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, cadaver, neon
Related CWEs: CWE-787
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0982.html, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000841, http://marc.info/?l=bugtraq&m=108498433632333&w=2
CWE: CWE-787
CVE-2004-2149
Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number of placeholders.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mysql
References: http://bugs.mysql.com/bug.php?id=5194, http://dev.mysql.com/doc/mysql/en/news-4-1-5.html, http://securitytracker.com/id?1011408
CVE-2004-0501
Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the remote site, which could allow remote attackers to know when a message has been read, verify valid e-mail addresses, and possibly leak other information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: outlook
References: http://marc.info/?l=bugtraq&m=108430168919965&w=2, http://marc.info/?l=bugtraq&m=108637351805607&w=2, http://marc.info/?l=ntbugtraq&m=108644231209698&w=2
CVE-2004-0998
Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: telnetd, telnetd-ssl
References: http://secunia.com/advisories/13663, http://www.debian.org/security/2004/dsa-616, http://www.kb.cert.org/vuls/id/995038
CVE-2004-1497
Web Forums Server 1.6 and 2.0 Power Pack stores passwords in plaintext in the Username.ini file, which allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web_forums_server
References: http://marc.info/?l=bugtraq&m=109943267328552&w=2, http://marc.info/?l=bugtraq&m=109943267328552&w=2
CVE-2004-1315
viewtopic.php in phpBB 2.x before 2.0.11 improperly URL decodes the highlight parameter when extracting words and phrases to highlight, which allows remote attackers to execute arbitrary PHP code by double-encoding the highlight value so that special characters are inserted into the result, which is then processed by PHP exec, as exploited by the Santy.A worm.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=110029415208724&w=2, http://marc.info/?l=bugtraq&m=110365752909029&w=2, http://marc.info/?t=110079440800004&r=1&w=2
CVE-2004-1062
Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: viewcvs
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html, http://security.gentoo.org/glsa/glsa-200412-26.xml, http://www.mikx.de/index.php?p=6
CVE-2004-1967
Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) myhome.php, (5) post.php, or (6) moderator.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link.
CVSS v3.1 Score: 8.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbb
Related CWEs: CWE-352
Related CAPECs: CAPEC-467, CAPEC-111, CAPEC-462
References: http://marc.info/?l=bugtraq&m=108301983206107&w=2, http://secunia.com/advisories/11481, http://securitytracker.com/id?1009935
CWE: CWE-352
CVE-2004-1794
Cross-site scripting (XSS) vulnerability in the VCard4J Toolkit allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vcard4j
References: http://securitytracker.com/id?1008582, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0006.html, http://www.securityfocus.com/bid/9343
CVE-2004-2527
The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.
CVSS v2.0 Score: 5.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C
Affected Products: windows_xp, windows_2003_server
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html, http://securitytracker.com/id?1010836, http://www.osvdb.org/8368
CVE-2004-1011
Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: secure_linux, cyrus_imap_server, linux, openpkg, fedora_core
References: http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-announce&msg=143, http://asg.web.cmu.edu/cyrus/download/imapd/changes.html, http://marc.info/?l=bugtraq&m=110123023521619&w=2
CVE-2004-1741
Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD with a binary file as an argument, then calling SHOWLIST.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: music_daemon
References: http://marc.info/?l=bugtraq&m=109329098806595&w=2, http://musicdaemon.sourceforge.net/, http://securitytracker.com/id?1011025
CVE-2004-1311
Integer overflow in the real_setup_and_get_header function in real.c for Unix MPlayer 1.0pre5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a Real RTSP streaming media file with a -1 content-length field, which leads to a heap-based buffer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mplayer
References: http://www.idefense.com/application/poi/display?id=166, http://www.mandriva.com/security/advisories?name=MDKSA-2004:157, http://www1.mplayerhq.hu/MPlayer/patches/rtsp_fix_20041215.diff
CVE-2004-1495
The Repair Archive command in WinRAR 3.40 allows remote attackers to cause a denial of service (application crash) via a corrupt ZIP archive.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: winrar
References: http://marc.info/?l=bugtraq&m=109941351432699&w=2, http://secunia.com/advisories/13070, http://www.rarlabs.com/rarnew.htm
CVE-2004-2304
Integer overflow in Trillian 0.74 and earlier, and Trillian Pro 2.01 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: trillian, trillian_pro
References: http://lists.seifried.org/pipermail/security/2004-February/001869.html, http://secunia.com/advisories/10973, http://security.e-matters.de/advisories/022004.html
CVE-2004-1536
SQL injection vulnerability in index.php in the ibProArcade module for Invision Power Board (IPB) 1.x and 2.x allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ipbproarcade
References: http://marc.info/?l=bugtraq&m=110098512318132&w=2, http://secunia.com/advisories/13260, http://securitytracker.com/id?1012292
CVE-2004-1909
Claim Anti-Virus (ClamAV) 0.68 and earlier allows remote attackers to cause a denial of service (crash) via certain RAR archives, such as those generated by the Beagle/Bagle worm.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: clamav
References: http://freshmeat.net/projects/clamav/?branch_id=29355&release_id=154462, http://secunia.com/advisories/11177, http://security.gentoo.org/glsa/glsa-200404-07.xml
CVE-2004-0054
Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ios
References: http://www.cert.org/advisories/CA-2004-01.html, http://www.cisco.com/warp/public/707/cisco-sa-20040113-h323.shtml, http://www.kb.cert.org/vuls/id/749342
CVE-2004-2180
Multiple cross-site scripting (XSS) vulnerabilities in WowBB Forum 1.61 allow remote attackers to inject arbitrary web script or HTML via the (1) country parameter to view_user.php, (2) show parameter to view_forum.php, (3) letter parameter to view_user.php, (4) highlight parameter to view_topic.php, (5) show parameter to index.php, (6) q parameter to search.php, (7) Referer header to admin.php, or the (8) user_email parameter to login.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: wowbb_web_forum
References: http://www.maxpatrol.com/advdetails.asp?id=7, http://www.securityfocus.com/bid/11429, http://www.maxpatrol.com/advdetails.asp?id=7
CVE-2004-1631
Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to conduct port scans of remote hosts by specifying the target in an rmi:// Worklist URL, then using the response times to infer the results.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: work_flow_engine
References: http://marc.info/?l=bugtraq&m=109876304705234&w=2, http://secunia.com/advisories/12970, http://www.securityfocus.com/bid/11514
CVE-2004-2366
Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service (crash) via a SITE command with a long argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: secure_ftp_server
References: http://secunia.com/advisories/11159/, http://www.cuteftp.com/gsftps/history.asp, http://www.securiteam.com/windowsntfocus/5KP0C20CAC.html
CVE-2004-2105
The webacc servlet in Novell NetWare Enterprise Web Server 5.1 and 6.0 allows remote attackers to read arbitrary .htt files via a full pathname in the error parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: netware
References: http://marc.info/?l=bugtraq&m=107487862304440&w=2, http://marc.info/?l=bugtraq&m=107487862304440&w=2
CVE-2004-1145
Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: enterprise_linux, propack, debian_linux, suse_linux, ethereal
References: http://marc.info/?l=bugtraq&m=110356286722875&w=2, http://secunia.com/advisories/13586, http://www.gentoo.org/security/en/glsa/glsa-200501-16.xml
CVE-2004-1831
Buffer overflow in Chrome 1.2.0.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large length value, which leads to a null dereference or out-of-bounds read.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: chrome
References: http://aluigi.altervista.org/adv/chrome-boom-adv.txt, http://marc.info/?l=bugtraq&m=107964719614657&w=2, http://www.securityfocus.com/bid/9898
CVE-2004-0247
The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: chaser_client, chaser_server
References: http://marc.info/?l=bugtraq&m=107584109420084&w=2, http://www.securityfocus.com/bid/9567, https://exchange.xforce.ibmcloud.com/vulnerabilities/15031
CVE-2004-2654
The clientAbortBody function in client_side.c in Squid Web Proxy Cache before 2.6 STABLE6 allows remote attackers to cause a denial of service (segmentation fault) via unspecified vectors that trigger a null dereference.  NOTE: in a followup advisory, a researcher claimed that the issue was a buffer overflow that was not fixed in STABLE6. However, the vendor's bug report clearly shows that the researcher later retracted this claim, because the tested product was actually STABLE5.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: squid
References: http://secunia.com/advisories/12508, http://secunia.com/advisories/12754, http://securitytracker.com/id?1011214
CVE-2004-2570
Opera before 7.54 allows remote attackers to modify properties and methods of the location object and execute Javascript to read arbitrary files from the client's local filesystem or display a false URL to the user.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: opera_browser
Related CWEs: CWE-74
Related CAPECs: CAPEC-53, CAPEC-51, CAPEC-9
MITRE ATT&CK Techniques: T1574.006, T1574.007, T1027
MITRE ATT&CK Tactics: T1562, T1574
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0131.html, http://osvdb.org/8331, http://secunia.com/advisories/12233
CWE: CWE-74
MITRE ATT&CK techniques: T1574.006, T1574.007, T1027, T1562.003
MITRE ATT&CK tactics: T1562, T1574
CVE-2004-0143
Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial of service (reset) via malformed Bluetooth OBject EXchange (OBEX) messages, probably triggering buffer overflows.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 6310i
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0034.html, http://marc.info/?l=bugtraq&m=107634788029065&w=2, http://www.pentest.co.uk/documents/ptl-2004-01.html
CVE-2004-1101
mailpost.exe in MailPost 5.1.1sv, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash), leak sensitive pathname information in the resulting error message, and execute a cross-site scripting (XSS) attack via an HTTP request that contains a / (backslash) and arbitrary webscript before the requested file, which leaks the pathname and does not quote the script in the resulting Visual Basic error message.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:P
Affected Products: mailpost
References: http://www.kb.cert.org/vuls/id/596046, http://www.procheckup.com/security_info/vuln_pr0411.html, http://www.securityfocus.com/bid/11598
CVE-2004-1832
Buffer overflow in the GUI admin service in Mac OS X Server 10.3 allows remote attackers to cause a denial of service (crash and restart) via a large amount of data to TCP port 660.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mac_os_x_server
References: http://marc.info/?l=bugtraq&m=107965605008575&w=2, http://marc.info/?l=bugtraq&m=107971225327629&w=2, http://www.securityfocus.com/bid/9914
CVE-2004-0194
Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: acrobat_reader
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018227.html, http://marc.info/?l=bugtraq&m=107842545022724&w=2, http://www.nextgenss.com/advisories/adobexfdf.txt
CVE-2004-2508
Cross-site scripting (XSS) vulnerability in main.cgi in Linksys WVC11B Wireless-B Internet Video Camera allows remote attackers to inject arbitrary web script or HTML via the next_file parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: wvc11b
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0215.html, http://secunia.com/advisories/11881, http://securitytracker.com/id?1010424
CVE-2004-2481
MyProxy 6.58 allows remote authenticated users in the Users Tab to connect to arbitrary hosts from the MyProxy server, possibly bypassing access restrictions, by connecting to the proxy and issuing a CONNECT command.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: myproxy
References: http://securitytracker.com/alerts/2004/Nov/1012322.html, http://www.osvdb.org/12138, http://www.securitylab.ru/vulnerability/source/210758.php
CVE-2004-2561
Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: web\+center
References: http://secunia.com/advisories/12121, http://www.osvdb.org/8180, http://www.securiteam.com/windowsntfocus/5RP0N0ADGK.html
CVE-2004-2309
Directory traversal vulnerability in Crob FTP Server 3.5.1 allows local users to browse outside the FTP root via multiple ../ (dot dot slash) in the DIR command.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: crob_ftp_server
References: http://secunia.com/advisories/10778/, http://www.securityfocus.com/archive/1/352329, http://www.securityfocus.com/bid/9546
CVE-2004-2686
Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs system calls.  NOTE: this might be the same issue as CVE-2004-1767, but there are insufficient details to be sure.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://seclists.org/bugtraq/2004/Apr/0081.html, http://securitytracker.com/id?1008833, http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2004-04/0297.html
CWE: CWE-22
CVE-2004-0056
Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: succession_communication_server_1000, 802.11_wireless_ip_gateway, business_communications_manager
References: http://www.cert.org/advisories/CA-2004-01.html, http://www.kb.cert.org/vuls/id/749342, http://www.securityfocus.com/bid/9406
CVE-2004-1576
Format string vulnerability in Judge Dredd: Dredd vs. Death 1.01 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a chat message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: judge_dredd_dredd_vs._death
References: http://marc.info/?l=bugtraq&m=109674541519610&w=2, http://secunia.com/advisories/12710, https://exchange.xforce.ibmcloud.com/vulnerabilities/17579
CVE-2004-1432
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via malformed (1) IP or (2) ICMP packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: optical_networking_systems_software
References: http://secunia.com/advisories/12117, http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml, http://www.kb.cert.org/vuls/id/918920
CVE-2004-1962
SQL injection vulnerability in index.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection filters by using "/**/" sequences in the targeted fields.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: protector_system
References: http://protector.warcenter.se/article-53--0-0.html, http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0, http://www.securityfocus.com/bid/10206
CVE-2004-0239
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: photopost_php_pro
References: http://marc.info/?l=bugtraq&m=107582512023998&w=2, http://www.securiteam.com/securitynews/5KP010UC0W.html, http://www.securityfocus.com/bid/9557