DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0660
Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: cutenews
References: http://marc.info/?l=bugtraq&m=108844000409449&w=2, http://www.swp-zone.org/archivos/advisory-06.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/16525
CVE-2004-1162
The unison command in scponly before 4.0 does not properly restrict programs that can be run, which could allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the (1) -rshcmd or (2) -sshcmd flags.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: scponly, linux
References: http://marc.info/?l=bugtraq&m=110202047507273&w=2, http://marc.info/?l=bugtraq&m=110581113814623&w=2, http://www.gentoo.org/security/en/glsa/glsa-200412-01.xml
CVE-2004-0294
YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: yet_another_bulletin_board
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://marc.info/?l=bugtraq&m=107703591314745&w=2, http://www.securityfocus.com/bid/9677, https://exchange.xforce.ibmcloud.com/vulnerabilities/15236
CWE: CWE-203
CVE-2004-2054
CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via (1) the mode parameter to privmsg.php or (2) the redirect parameter to login.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=109034476122723&w=2, http://secunia.com/advisories/12114, http://www.securityfocus.com/bid/10753
CVE-2004-2704
Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the Content-Disposition field for attachments, which causes the attachment to be rendered inline by Internet Explorer when the victim clicks the download link, which facilitates cross-site scripting (XSS) and possibly other attacks.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: hastymail, internet_explorer
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/bugtraq/2004-08/0322.html, http://hastymail.sourceforge.net/security.php, http://secunia.com/advisories/12358
CWE: CWE-79
CVE-2004-1348
Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service (process crash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://secunia.com/advisories/12470/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57614-1, http://www.auscert.org.au/render.html?it=4369
CVE-2004-0307
Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: optical_networking_systems_software
References: http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml, http://www.osvdb.org/4009, http://www.securityfocus.com/bid/9699
CVE-2004-2685
Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) command to the Telnet proxy service, a different vector than CVE-2004-2416.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ccproxy
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://secunia.com/advisories/13085, http://www.youngzsoft.net/ccproxy/whatsnew.htm, https://www.exploit-db.com/exploits/4360
CWE: CWE-119
CVE-2004-2114
Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: proxynow
References: http://marc.info/?l=bugtraq&m=107515550931508&w=2, http://www.securityfocus.com/bid/9500, https://exchange.xforce.ibmcloud.com/vulnerabilities/14955
CVE-2004-2325
Cross-site scripting (XSS) vulnerability in EditModule.aspx for DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to inject arbitrary web script or HTML.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: dotnetnuke
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html, http://secunia.com/advisories/10747, http://www.osvdb.org/3751
CVE-2004-0291
SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: yabb
References: http://marc.info/?l=bugtraq&m=107696318522985&w=2, http://www.securityfocus.com/bid/9674, https://exchange.xforce.ibmcloud.com/vulnerabilities/15224
CVE-2004-2456
SQL injection vulnerability in index.php in miniBB 1.7f and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a userinfo action.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: minibb
References: http://securitytracker.com/id?1012164, http://www.minibb.net/forums/index.php?action=vthread&forum=1&topic=1767, http://www.minibb.net/forums/index.php?action=vthread&forum=9&topic=1854
CVE-2004-2088
Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification (DSN) where the original email is not included in the bounce message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: sophos_anti-virus
References: http://secunia.com/advisories/10855, http://securitytracker.com/id?1009042, http://www.securityfocus.com/bid/9650
CVE-2004-0256
GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: libtool
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000811, http://secunia.com/advisories/10777, http://www.geocrawler.com/mail/msg.php3?msg_id=3438808&list=405
CVE-2004-1168
Stack-based buffer overflow in the WebDav handler in MaxDB WebTools 7.5.00.18 and earlier allows remote attackers to execute arbitrary code via a long Overwrite header.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: maxdb
References: http://marc.info/?l=bugtraq&m=110244542000340&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18386, http://marc.info/?l=bugtraq&m=110244542000340&w=2
CVE-2004-2584
frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folder that SmarterMail cannot delete or rename via a folder name with a null byte ("%00"). NOTE: it is not clear whether this issue poses a vulnerability.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Affected Products: smartermail
References: http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt, http://www.zone-h.org/advisories/read/id=4098, https://exchange.xforce.ibmcloud.com/vulnerabilities/15392
CVE-2004-0113
Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000839, http://issues.apache.org/bugzilla/show_bug.cgi?id=27106, http://marc.info/?l=apache-cvs&m=107869699329638
CVE-2004-2220
F-Secure Anti-Virus for Microsoft Exchange 6.30 and 6.31 does not properly detect certain password-protected files in a ZIP file, which allows remote attackers to bypass anti-virus protection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: f-secure_anti-virus
References: ftp://ftp.f-secure.com/support/hotfix/fsav-mse/fsavmse63x-02_readme.txt, http://secunia.com/advisories/13067, http://securitytracker.com/id?1012057
CVE-2004-0169
QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: darwin_streaming_server
References: http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html, http://www.idefense.com/application/poi/display?id=75&type=vulnerabilities, http://www.kb.cert.org/vuls/id/460350
CVE-2004-2624
Cross-site scripting (XSS) vulnerability in "TextSearch" in WackoWiki 3.5 allows remote attackers to inject arbitrary web script or HTML via the "phrase" parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: wackowiki
References: http://secunia.com/advisories/12209, http://wackowiki.com/WackoDownload/VersionHistory?v=yrv, http://www.osvdb.org/8295
CVE-2004-0075
The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846, http://frontal2.mandriva.com/security/advisories?name=MDKSA-2004:015, http://www.ciac.org/ciac/bulletins/o-082.shtml
CVE-2004-2536
The exit_thread function (process.c) in Linux kernel 2.6 through 2.6.5 does not invalidate the per-TSS io_bitmap pointers if a process obtains IO access permissions from the ioperm function but does not drop those permissions when it exits, which allows other processes to access the per-TSS pointers, access restricted memory locations, and possibly gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://secunia.com/advisories/11577, http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.6, http://www.osvdb.org/5997
CVE-2004-2702
Cross-site scripting (XSS) vulnerability in login_up.php3 in Plesk 7.0 and 7.1 Reloaded allows remote attackers to inject arbitrary web script or HTML via the login_name parameter.  NOTE: this might be the same vector as CVE-2006-6451.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: plesk
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1022.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1031.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0554.html
CWE: CWE-79
CVE-2004-0354
Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: anubis
References: http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html, http://marc.info/?l=bugtraq&m=107843915424588&w=2, http://www.securityfocus.com/bid/9772
CVE-2004-1085
Human Interface Toolbox (HIToolBox) for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: quicktime_streaming_server, darwin_streaming_server, mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://secunia.com/advisories/13362/, http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE-2004-0612
The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering.  NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: zonealarm
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0420.html, http://marc.info/?l=bugtraq&m=108786444608208&w=2, http://www.securityfocus.com/bid/10584
CVE-2004-1920
X-Micro WLAN 11b Broadband Router 1.2.2, 1.2.2.3, 1.2.2.4, and 1.6.0.0 has a hardcoded "super" username and password, which could allow remote attackers to gain access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wlan_11b_broadband_router_firmware
References: http://marc.info/?l=bugtraq&m=108162529229947&w=2, http://secunia.com/advisories/11342, http://www.securityfocus.com/bid/10095
CVE-2004-2008
SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL via the jokeid parameter.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: nukejokes
References: http://marc.info/?l=bugtraq&m=108404714232579&w=2, http://secunia.com/advisories/11579, http://www.securityfocus.com/bid/10306
CVE-2004-1543
Directory traversal vulnerability in viewimg.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the path parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: korweblog
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029342.html, http://marc.info/?l=bugtraq&m=110132543805873&w=2, http://secunia.com/advisories/13286
CVE-2004-0063
The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: payshield_spp_library
References: http://marc.info/?l=bugtraq&m=107411819503569&w=2, http://www.ncipher.com/support/advisories/advisory8_payshield.html, http://www.osvdb.org/3537
CVE-2004-2124
The register_globals simulation capability in Gallery 1.3.1 through 1.4.1 allows remote attackers to modify the HTTP_POST_VARS variable and conduct a PHP remote file inclusion attack via the GALLERY_BASEDIR parameter, a different vulnerability than CVE-2002-1412.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: gallery
References: http://gallery.menalto.com/modules.php?op=modload&name=News&file=index, http://marc.info/?l=bugtraq&m=107524414317693&w=2, http://secunia.com/advisories/10712/
CVE-2004-1095
Multiple integer overflows in (1) readbmp.c, (2) readgif.c, (3) readgif.c, (4) readmrf.c, (5) readpcx.c, (6) readpng.c,(7) readpnm.c, (8) readprf.c, (9) readtiff.c, (10) readxbm.c, (11) readxpm.c in zgv 5.8 allow remote attackers to execute arbitrary code via certain image headers that cause calculations to be overflowed and small buffers to be allocated, leading to buffer overflows.  NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer.  Therefore, they should be regarded as distinct.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: zgv_image_viewer, debian_linux, xzgv_image_viewer
References: http://marc.info/?l=bugtraq&m=109886210702781&w=2, http://marc.info/?l=bugtraq&m=109898111915661&w=2, http://www.gentoo.org/security/en/glsa/glsa-200411-12.xml
CVE-2004-2261
Cross-site scripting (XSS) vulnerability in e107 allows remote attackers to inject arbitrary script or HTML via the "login name/author" field in the (1) news submit or (2) article submit functions.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: e107
References: http://secunia.com/advisories/11567, http://securitytracker.com/id?1010084, http://www.osvdb.org/5982
CVE-2004-1515
SQL injection vulnerability in (1) ttlast.php and (2) last10.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL statements via the fsel parameter, as demonstrated using last.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: vbulletin
References: http://marc.info/?l=bugtraq&m=110019198507100&w=2, http://marc.info/?l=bugtraq&m=110019198507100&w=2
CVE-2004-1811
The SSL HTTP Server in HP Web-enabled Management Software 5.0 through 5.92, with anonymous access enabled, allows remote attackers to compromise the trusted certificates by uploading their own certificates.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ssl_http_server
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0057.html, http://marc.info/?l=bugtraq&m=107936784030214&w=2, http://secunia.com/advisories/11126
CVE-2004-0537
Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: opera_browser
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022263.html, http://marc.info/?l=bugtraq&m=108627581717738&w=2, http://osvdb.org/6590
CVE-2004-1066
The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory.  NOTE: this candidate might be SPLIT into 2 separate items in the future.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:P
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:17.procfs.asc, https://exchange.xforce.ibmcloud.com/vulnerabilities/18321, ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:17.procfs.asc
CVE-2004-1490
Opera 7.54 and earlier allows remote attackers to spoof file types in the download dialog via dots and non-breaking spaces (ASCII character code 160) in the (1) Content-Disposition or (2) Content-Type headers.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: opera_browser
References: http://secunia.com/advisories/12981, http://secunia.com/secunia_research/2004-19/advisory/, http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml
CVE-2004-1843
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: member_management_system
References: http://marc.info/?l=bugtraq&m=107999697625786&w=2, http://secunia.com/advisories/11179, http://securitytracker.com/id?1009508
CVE-2004-2060
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain the database via a direct request to the database filename, which is predictable based on table and field names.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: asprunner
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html, http://ferruh.mavituna.com/article/?574, http://marc.info/?l=bugtraq&m=109086977330418&w=2
CVE-2004-1782
athenareg.php in Athena Web Registration allows remote attackers to execute arbitrary commands via shell metacharacters in the pass parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: athena_web_registration
References: http://www.osvdb.org/16861, http://www.securityfocus.com/bid/9349, http://www.osvdb.org/16861
CVE-2004-2742
Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report (RPT) file.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: crystal_enterprise
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://secunia.com/advisories/13644, http://securitytracker.com/id?1012703, http://support.businessobjects.com/library/kbase/articles/c2016559.asp
CWE: CWE-79
CVE-2004-0191
Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: mozilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=227417, http://marc.info/?l=bugtraq&m=107774710729469&w=2, http://marc.info/?l=bugtraq&m=108448379429944&w=2
CVE-2004-0336
LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: 602pro_lan_suite
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0096.html, http://marc.info/?l=bugtraq&m=107799540630302&w=2, http://www.securityfocus.com/bid/9781
CVE-2004-1626
Buffer overflow in Ability Server 2.34, and possibly other versions, allows remote attackers to execute arbitrary code via a long STOR command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ability_server
References: http://marc.info/?l=bugtraq&m=109850947508816&w=2, http://secunia.com/advisories/12941, http://www.kb.cert.org/vuls/id/857846
CVE-2004-2353
BugPort before 1.099 stores its configuration file (conf/config.conf) under the web document root with a file extension that is not normally parsed by web servers, which allows remote attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bugport
References: http://secunia.com/advisories/10785/, http://www.incogen.com/downloads/bugport/CHANGELOG.txt, http://www.securityfocus.com/bid/9542
CVE-2004-2037
Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the "cd" command in an interactive FTP client.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lightweight_ftp_server
References: http://marc.info/?l=bugtraq&m=108577846011604&w=2, http://marc.info/?l=bugtraq&m=108611230015042&w=2, http://securitytracker.com/id?1010328
CVE-2004-2646
The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (uncaught NullPointerException) via unknown attack vectors that cause the usrName variable to be null.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: free_web_chat
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/0102.html, http://marc.info/?l=bugtraq&m=109164397601049&w=2, http://securitytracker.com/alerts/2004/Aug/1010851.html
CVE-2004-2439
The remote upgrade capability in HP LaserJet 4200 and 4300 printers does not require a password, which allows remote attackers to upgrade firmware.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: laserjet_9065, laserjet_9000_mfp, laserjet_3000, laserjet_9055, laserjet_9050
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBPI01085, http://securitytracker.com/id?1011671, http://www.securityfocus.com/bid/11297
CVE-2004-1473
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP port scan with a source port of UDP 53.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nexland_wavebase_firewall_appliance, firewall_vpn_appliance_200r, nexland_pro400_firewall_appliance, firewall_vpn_appliance_200, gateway_security_320
References: http://marc.info/?l=bugtraq&m=109588376426070&w=2, http://secunia.com/advisories/12635, http://securityresponse.symantec.com/avcenter/security/Content/2004.09.22.html
CVE-2004-2525
Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: serendipity
References: http://secunia.com/advisories/13357, http://securitytracker.com/id?1012383, http://sourceforge.net/tracker/index.php?func=detail&aid=1076762&group_id=75065&atid=542822
CVE-2004-2514
Cross-site scripting (XSS) vulnerability in modules/private_messages/index.php in PowerPortal 1.x allows remote attackers to inject arbitrary web script or HTML via the (1) SUBJECT or (2) MESSAGE field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: powerportal
References: http://securitytracker.com/id?1010802, http://www.osvdb.org/8319, http://www.secure4arab.com/forum/showthread.php?t=302
CVE-2004-1804
wMCam server 2.1.348 allows remote attackers to cause a denial of service (no new connections) via multiple malformed HTTP requests without the GET command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: wmcam_server
References: http://marc.info/?l=bugtraq&m=107894337524376&w=2, http://www.securityfocus.com/bid/9839, https://exchange.xforce.ibmcloud.com/vulnerabilities/15431
CVE-2004-0182
Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mailman
References: ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc, http://www.redhat.com/support/errata/RHSA-2004-156.html, ftp://patches.sgi.com/support/free/security/advisories/20040404-01-U.asc
CVE-2004-1144
Unknown vulnerability in the 32bit emulation code in Linux 2.4 on AMD64 systems allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=110376890429798&w=2, http://www.redhat.com/support/errata/RHSA-2004-689.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18686
CVE-2004-0820
Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: winamp
References: http://secunia.com/advisories/12381/, http://www.auscert.org.au/render.html?it=4338, http://www.frsirt.com/exploits/08252004.skinhead.php
CVE-2004-2115
Multiple cross-site scripting (XSS) vulnerabilities in Oracle HTTP Server 1.3.22, based on Apache, allow remote attackers to execute arbitrary script as other users via the (1) action, (2) username, or (3) password parameters in an isqlplus request.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: http_server
References: http://marc.info/?l=bugtraq&m=107496560106967&w=2, http://www.securityfocus.com/bid/9484, https://exchange.xforce.ibmcloud.com/vulnerabilities/14930
CVE-2004-0696
The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webstar
References: ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt, http://www.atstake.com/research/advisories/2004/a071304-1.txt, http://www.securityfocus.com/bid/10721
CVE-2004-1417
Cross-site scripting (XSS) vulnerability in login.php in PsychoStats 2.2.4 Beta and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: psychostats
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=110383119525592&w=2, http://secunia.com/advisories/13619/, http://www.gulftech.org/?node=research&article_id=00057-12222004
CWE: CWE-79
CVE-2004-0840
The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_server_2003, windows_xp, exchange_server
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://www.kb.cert.org/vuls/id/394792, http://www.securityfocus.com/bid/11374, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-035
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-1170
a2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: java_desktop_system, suse_linux, a2ps
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1026.html, http://bugs.debian.org/283134, http://marc.info/?l=bugtraq&m=110598355226660&w=2
CVE-2004-1595
Buffer overflow in ShixxNote 6.net build 117 allows remote attackers to execute arbitrary code via a long font field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shixxnote
References: http://marc.info/?l=bugtraq&m=109778648232233&w=2, http://secunia.com/advisories/12822/, http://www.securityfocus.com/bid/11409
CVE-2004-0933
Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: suse_linux, etrust_ez_armor, etrust_intrusion_detection, rav_antivirus_desktop, brightstor_arcserve_backup
References: http://supportconnectw.ca.com/public/ca_common_docs/arclib_vuln.asp, http://www.idefense.com/application/poi/display?id=153&type=vulnerabilities&flashstatus=true, http://www.securityfocus.com/bid/11448
CVE-2004-0629
Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: acrobat, acrobat_reader
References: http://www.adobe.com/support/techdocs/330527.html, http://www.gentoo.org/security/en/glsa/glsa-200408-14.xml, http://www.idefense.com/application/poi/display?id=126&type=vulnerabilities
CVE-2004-1981
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: crystal_reports, crystal_enterprise
References: http://marc.info/?l=bugtraq&m=108360413811017&w=2, http://marc.info/?l=bugtraq&m=108671836127360&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16046
CVE-2004-2732
nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which can be leveraged to determine the access key.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected Products: netbilling
Related CWEs: CWE-78
Related CAPECs: CAPEC-43, CAPEC-6, CAPEC-88
References: http://securitytracker.com/id?1011881, http://web.archive.org/web/20041106200147/http://www.it-helpnet.de/bugless/bugs.php?mode=show&id=8&SID=, http://www.osvdb.org/10902
CWE: CWE-78
CVE-2004-0742
Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: java_system_calendar_server
References: http://secunia.com/advisories/12134, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57586, http://www.kb.cert.org/vuls/id/881254
CVE-2004-1566
Cross-site scripting (XSS) vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: silent-storm_portal
References: http://marc.info/?l=bugtraq&m=109655763808924&w=2, http://secunia.com/advisories/12704, http://securitytracker.com/id?1011470
CVE-2004-0889
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, pdftohtml, debian_linux, suse_linux, kde
References: http://marc.info/?l=bugtraq&m=109880927526773&w=2, http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml, http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml
CVE-2004-1373
Format string vulnerability in SHOUTcast 1.9.4 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via format string specifiers in a content URL, as demonstrated in the filename portion of a .mp3 file.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: shoutcast_server
References: http://marc.info/?l=bugtraq&m=110382975516003&w=2, http://marc.info/?l=bugtraq&m=110886444014745&w=2, http://securitytracker.com/id?1012675
CVE-2004-1171
KDE 3.2.x and 3.3.0 through 3.3.2, when saving credentials that are (1) manually entered by the user or (2) created by the SMB protocol handler, stores those credentials for plaintext in the user's .desktop file, which may be created with world-readable permissions, which could allow local users to obtain usernames and passwords for remote resources such as SMB shares.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: fedora_core, kde, mandrake_linux
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-11/1292.html, http://marc.info/?l=bugtraq&m=110178786809694&w=2, http://marc.info/?l=bugtraq&m=110261063201488&w=2
CVE-2004-0844
Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ie
References: http://marc.info/?l=bugtraq&m=110178042025729&w=2, http://marc.info/?l=ntbugtraq&m=110174346717733&w=2, http://www.kb.cert.org/vuls/id/431576
CVE-2004-1718
The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of service (crash) via an invalid pointer in the "oa" argument.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: integrity_protection_driver
References: http://marc.info/?l=bugtraq&m=109276749821133&w=2, http://secunia.com/advisories/12169, http://www.ngsec.com/docs/advisories/NGSEC-2004-6.txt
CVE-2004-0824
PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mac_os_x
References: http://securitytracker.com/id?1011175, http://www.auscert.org.au/render.html?it=4363, http://www.ciac.org/ciac/bulletins/o-212.shtml
CVE-2004-0852
Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: htget
References: http://secunia.com/advisories/13579, http://www.debian.org/security/2004/dsa-611, https://exchange.xforce.ibmcloud.com/vulnerabilities/18603
CVE-2004-0150
Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: python
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://www.debian.org/security/2004/dsa-458, http://www.gentoo.org/security/en/glsa/glsa-200409-03.xml, http://www.mandrakesoft.com/security/advisories?name=MDKSA-2004:019
CWE: CWE-120
CVE-2004-2174
Cross-site scripting (XSS) vulnerability in Custva.asp in EarlyImpact ProductCart allows remote attackers to inject arbitrary Javascript via the redirectUrl parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: productcart
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html, http://secunia.com/advisories/10898
CVE-2004-1404
Attachment Mod 2.3.10 module for phpBB, when used with Apache mod_mime, does not properly handle files with multiple file extensions, such as .php.rar, which allows remote attackers to upload and execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: attachment_mod
References: http://marc.info/?l=bugtraq&m=110321557806215&w=2, http://secunia.com/advisories/13421/, http://www.opentools.de/board/viewtopic.php?t=3590
CVE-2004-2697
The Inventory Scout daemon (invscoutd) 1.3.0.0 and 2.0.2 for AIX 4.3.3 and 5.1 allows local users to gain privileges via a symlink attack on a command line argument (log file).  NOTE: this might be related to CVE-2006-5002.
CVSS v2.0 Score: 6.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Affected Products: aix
Related CWEs: CWE-362
Related CAPECs: CAPEC-29, CAPEC-26
References: http://secunia.com/advisories/11200, http://www.osvdb.org/4582, http://www.securiteam.com/exploits/5CP0F0UDFG.html
CWE: CWE-362
CVE-2004-0881
getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: slackware_linux, linux, getmail
References: http://marc.info/?l=bugtraq&m=109571883130372&w=2, http://security.gentoo.org/glsa/glsa-200409-32.xml, http://www.debian.org/security/2004/dsa-553
CVE-2004-0068
PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by modifying the $relative_script_path parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpdig
References: http://marc.info/?l=bugtraq&m=107412194008671&w=2, http://www.phpdig.net/showthread.php?s=58bcc71c822830ec3bbdaae6d56846e0&threadid=393, http://www.securityfocus.com/bid/9424
CVE-2004-2183
Unknown vulnerability in WeHelpBUS 0.1 allows remote attackers to execute arbitrary shell commands via the query string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wehelpbus
References: http://sourceforge.net/project/shownotes.php?release_id=275295, http://www.securityfocus.com/bid/11431, http://sourceforge.net/project/shownotes.php?release_id=275295
CVE-2004-2249
Unknown vulnerability in the "access code" in SecureEditor before 0.1.2 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: audienceconnect_secureeditor
References: http://securitytracker.com/id?1012066, http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279733, http://www.osvdb.org/11445
CVE-2004-0059
Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in the filename parameter of a Content-Disposition: header.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: www_file_share_pro
References: http://marc.info/?l=bugtraq&m=107411794303201&w=2, http://www.securitytracker.com/id?1008779, http://marc.info/?l=bugtraq&m=107411794303201&w=2
CVE-2004-0369
Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: velociraptor, gateway_security_5300, enterprise_firewall, gateway_security_5400, entrust_libkmp_isakmp_library
References: http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html, http://www.auscert.org.au/render.html?it=4339, http://www.ciac.org/ciac/bulletins/o-206.shtml
CVE-2004-0138
The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Affected Products: linux_kernel
References: http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes, http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.25, http://linux.bkbits.net:8080/linux-2.4/cset%404021346f79nBb-4X_usRikR3Iyb4Vg
CVE-2004-1480
Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: storageworks_command_view
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=PSD_HPSBST01071, http://securitytracker.com/id?1011407, http://www.securityfocus.com/bid/11249
CVE-2004-1999
Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the (1) ttitle or (2) sid parameters to modules.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=108378804809891&w=2, http://secunia.com/advisories/11553, http://www.waraxe.us/index.php?modname=sa&id=27
CVE-2004-2563
Serena TeamTrack 6.1.1 allows remote attackers to obtain sensitive information such as user names, versions, and database information, and conduct cross-site scripting (XSS) attacks, via a direct request to tmtrack.dll with modified LoginPage and Template parameters.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Products: serena_teamtrack
References: http://secunia.com/advisories/12122, http://www.osvdb.org/8182, http://www.osvdb.org/8183
CVE-2004-0385
Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener.  NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: application_server_web_cache, e-business_suite
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0078.html, http://marc.info/?l=bugtraq&m=107945649127635&w=2, http://marc.info/?l=bugtraq&m=108144419001770&w=2
CVE-2004-0271
Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: maxwebportal
References: http://marc.info/?l=bugtraq&m=107643014606515&w=2, http://www.securityfocus.com/bid/9625, https://exchange.xforce.ibmcloud.com/vulnerabilities/15120
CVE-2004-0358
Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrary script as other users via (1) the mainnews parameter in admin.php, (2) the expand parameter in admin.php, (3) the id parameter in admin.php, (4) the catid parameter in admin.php, or (5) an unnamed parameter during the newslogo_upload action in admin.php.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: virtuanews_pro
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0069.html, http://marc.info/?l=bugtraq&m=107851556116088&w=2, http://www.securityfocus.com/bid/9812