DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1230
Gadu-Gadu allows remote attackers to gain sensitive information and read files from the _cache directory of other users via a DCC connection and a CTCP packet that contains a 1 as the type and a 4 as the subtype.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=110295777306493&w=2, http://www.man.poznan.pl/~security/gg-adv.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18461
CVE-2004-1022
Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: kerio_mailserver, winroute_firewall, serverfirewall
References: http://marc.info/?l=bugtraq&m=110304957607578&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18470, http://marc.info/?l=bugtraq&m=110304957607578&w=2
CVE-2004-0979
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_xp, ie, internet_explorer
References: http://www.kb.cert.org/vuls/id/630720, http://www.us-cert.gov/cas/techalerts/TA04-293A.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-038
CVE-2004-0154
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: nfs-utils
References: http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535, http://www.redhat.com/support/errata/RHSA-2004-072.html, http://www.securityfocus.com/bid/9813
CVE-2004-2117
Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via malformed HTTP requests such as (1) a GET request without the HTTP version (HTTP/1.1), or (2) a request without GET or the HTTP version.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tinyserver
References: http://marc.info/?l=bugtraq&m=107496530806730&w=2, http://secunia.com/advisories/10707, http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt
CVE-2004-2420
Hitachi Job Management Partner (JP1) JP1/File Transmission Server/FTP 6 and 7 allows remote attackers to cause a denial of service (daemon halt) via a port scan involving reset packets.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jp1_p-1b41-9471, jp1_p-1j41-9471, jp1_p-1b41-9461
References: http://secunia.com/advisories/12050, http://securitytracker.com/id?1011024, http://www.hitachi-support.com/security_e/vuls_e/HS04-005_e/01-e.html
CVE-2004-1264
Buffer overflow in the simplify_path function in config.c for ChBg 1.5 allows remote attackers to execute arbitrary code via a crafted chbg scenario file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: chbg
References: http://tigger.uic.edu/~jlongs2/holes/chbg.txt, http://www.debian.org/security/2005/dsa-644, http://www.mandriva.com/security/advisories?name=MDKSA-2005:027
CVE-2004-2750
Directory traversal vulnerability in browser.php in JBrowser 1.0 through 2.1 allows remote attackers to read arbitrary files via the directory parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jbrowser
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://securitytracker.com/id?1008909, http://www.securityfocus.com/bid/9535, http://securitytracker.com/id?1008909
CWE: CWE-22
CVE-2004-0947
Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, linux, unarj
References: http://lwn.net/Articles/121827/, http://www.debian.org/security/2005/dsa-652, http://www.gentoo.org/security/en/glsa/glsa-200411-29.xml
CVE-2004-0714
Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers to cause a denial of service (device reload and memory corruption).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios, ons_15454e_optical_transport_platform, optical_networking_systems_software
References: http://www.cisco.com/warp/public/707/cisco-sa-20040420-snmp.shtml, http://www.kb.cert.org/vuls/id/162451, http://www.securityfocus.com/bid/10186
CVE-2004-1090
Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service via "a corrupt section header."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, midnight_commander, debian_linux, suse_linux, linux
References: http://secunia.com/advisories/13863/, http://www.debian.org/security/2005/dsa-639, http://www.redhat.com/support/errata/RHSA-2005-512.html
CVE-2004-1984
Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php-nuke, coppermine_photo_gallery
References: http://marc.info/?l=bugtraq&m=108360247732014&w=2, http://secunia.com/advisories/11524, http://securitytracker.com/id?1010001
CVE-2004-1602
ProFTPD 1.2.x, including 1.2.8 and 1.2.10, responds in a different amount of time when a given username exists, which allows remote attackers to identify valid usernames by timing the server response.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: proftpd
Related CWEs: CWE-203
Related CAPECs: CAPEC-189
References: http://marc.info/?l=bugtraq&m=109786760926133&w=2, http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02, http://securitytracker.com/id?1011687
CWE: CWE-203
CVE-2004-2078
Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via a long request to TCP port 80, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: red-alert
References: http://genhex.org/releases/031003.txt, http://marc.info/?l=full-disclosure&m=107635119005407&w=2, http://secunia.com/advisories/10832
CVE-2004-0839
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: s3400, modular_messaging_message_storage_server, internet_explorer, symposium_web_centre_portal, mobile_voice_client_2050
References: http://marc.info/?l=bugtraq&m=109303291513335&w=2, http://marc.info/?l=bugtraq&m=109336221826652&w=2, http://seclists.org/lists/fulldisclosure/2004/Aug/0868.html
CVE-2004-1928
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possibly execute arbitrary files via the img/wiki_up URL.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tikiwiki_cms//groupware
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://marc.info/?l=bugtraq&m=108180073206947&w=2, http://secunia.com/advisories/11344, http://tikiwiki.org/tiki-read_article.php?articleId=66
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-1357
The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: solaris
References: http://secunia.com/advisories/11316/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57538-1, http://www.auscert.org.au/render.html?it=4003
CVE-2004-0419
XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xdm, x11r6, linux
References: http://bugs.xfree86.org/show_bug.cgi?id=1376, http://secunia.com/advisories/12019, http://securitytracker.com/id?1010306
CVE-2004-2537
Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: surgemail
References: http://netwinsite.com/surgemail/help/updates.htm, http://secunia.com/advisories/13621, http://www.osvdb.org/12559
CVE-2004-1023
Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folder, and modify XML files related to configuration.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: kerio_mailserver, winroute_firewall, serverfirewall
References: http://marc.info/?l=bugtraq&m=110305387813002&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18471, http://marc.info/?l=bugtraq&m=110305387813002&w=2
CVE-2004-1927
Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to determine the existence of arbitrary files via .. (dot dot) sequences in the mapfile parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tikiwiki_cms//groupware
Related CWEs: CWE-22
Related CAPECs: CAPEC-78, CAPEC-126, CAPEC-76
References: http://marc.info/?l=bugtraq&m=108180073206947&w=2, http://secunia.com/advisories/11344, http://tikiwiki.org/tiki-read_article.php?articleId=66
CWE: CWE-22
CVE-2004-1502
The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to cause a denial of service (socket exhaustion) via a Telnet request to an IP address of the proxy's network interface, which causes a loop.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 602lan_suite
References: http://marc.info/?l=bugtraq&m=109976745017459&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17979, http://marc.info/?l=bugtraq&m=109976745017459&w=2
CVE-2004-2496
The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST requests to /Search.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: opentext_firstclass
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0321.html, http://secunia.com/advisories/13415, http://securitytracker.com/id?1012478
CVE-2004-2374
BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: badblue
References: http://www.securityfocus.com/archive/1/355109, http://www.securityfocus.com/bid/9737, https://exchange.xforce.ibmcloud.com/vulnerabilities/15311
CVE-2004-2585
Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via Javascript to the "check spelling" feature in the compose area.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: smartermail
References: http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt, http://secunia.com/advisories/11042, http://securitytracker.com/id?1009307
CVE-2004-0128
PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgedview
References: http://secunia.com/advisories/10753/, http://sourceforge.net/project/shownotes.php?release_id=141517, http://www.osvdb.org/3769
CVE-2004-2544
Admin Console in Secure Computing Corporation Sidewinder G2 6.1.0.01 exports private keys when exporting firewall certificates, which might allow attackers to obtain sensitive information.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sidewinder_g2
References: http://www.osvdb.org/6235, http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf, https://exchange.xforce.ibmcloud.com/vulnerabilities/24364
CVE-2004-1409
Multiple cross-site scripting vulnerabilities in Image Gallery Web Application 0.9.10 allow remote attackers to inject arbitrary web script or HTML.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: image_gallery_web_application
References: http://marc.info/?l=bugtraq&m=110323479715051&w=2, http://www.securityfocus.com/bid/11990, http://marc.info/?l=bugtraq&m=110323479715051&w=2
CVE-2004-1216
The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server freeze) via a long (1) nickname or (2) model type, which generates dialog boxes on the server that must be manually handled before the server continues the game.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: kreed
References: http://marc.info/?l=bugtraq&m=110201776207915&w=2, http://www.securityfocus.com/bid/11799, https://exchange.xforce.ibmcloud.com/vulnerabilities/18345
CVE-2004-2408
Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: linux-vserver
References: http://archives.neohapsis.com/archives/bugtraq/2004-07/0040.html, http://linux-vserver.org/ChangeLog, http://secunia.com/advisories/12021
CVE-2004-0230
TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openpgp, netbsd, unixware, windows_server_2003, network_data_loss_prevention
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-006.txt.asc, ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.3/SCOSA-2005.3.txt, ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.9/SCOSA-2005.9.txt
CVE-2004-0181
The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux_kernel
References: http://marc.info/?l=bugtraq&m=108213675028441&w=2, http://secunia.com/advisories/17002, http://security.gentoo.org/glsa/glsa-200407-02.xml
CVE-2004-1332
Stack-based buffer overflow in the FTP daemon in HP-UX 11.11i, with the -v (debug) option enabled, allows remote attackers to execute arbitrary code via a long command request.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux, vvos, sis, hp-ux_series_800, hp-ux_series_700
References: http://marc.info/?l=bugtraq&m=110797179710695&w=2, http://secunia.com/advisories/13608, http://securitytracker.com/id?1012650
CVE-2004-0598
The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: libpng
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000856, http://lists.apple.com/mhonarc/security-announce/msg00056.html, http://marc.info/?l=bugtraq&m=109163866717909&w=2
CVE-2004-0289
Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via a database file that contains a large key parameter.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: signaturedb
References: http://marc.info/?l=bugtraq&m=107695113832648&w=2, http://www.securityfocus.com/bid/9661, https://exchange.xforce.ibmcloud.com/vulnerabilities/15217
CVE-2004-2433
Buffer overflow in the IsValidFile function in the ADM ActiveX control for Altnet Download Manager 4.0.0.4 and earlier, as used in Kazaa Media Desktop 1.3 through 2.6.4 and Grokkster 1.3 through 2.6, allows remote attackers to execute arbitrary code via a long bstrFilepath parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: kazaa_media_desktop, altnet_download_manager, grokster
References: http://secunia.com/advisories/12446, http://secunia.com/advisories/12456, http://securitytracker.com/id?1011155
CVE-2004-1628
Format string vulnerability in log.c in rssh before 2.2.2 allows remote authenticated users to execute arbitrary code.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: rssh
Related CWEs: CWE-134
Related CAPECs: CAPEC-135, CAPEC-67
References: http://marc.info/?l=bugtraq&m=109855982425122&w=2, http://secunia.com/advisories/12954, http://www.gentoo.org/security/en/glsa/glsa-200410-28.xml
CWE: CWE-134
CVE-2004-0494
Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux, enterprise_linux_desktop, linux_advanced_workstation, cvlan
References: http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html, http://www.redhat.com/support/errata/RHSA-2004-373.html, https://bugzilla.fedora.us/show_bug.cgi?id=1944
CVE-2004-1426
Directory traversal vulnerability in index.php in KorWeblog 1.6.2-cvs and earlier allows remote attackers to read arbitrary files and execute arbitrary PHP files via .. (dot dot) sequences in the lng parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: korweblog
References: http://marc.info/?l=bugtraq&m=110442847614890&w=2, http://www.securityfocus.com/bid/12132, http://marc.info/?l=bugtraq&m=110442847614890&w=2
CVE-2004-2344
Unknown vulnerability in the ASN.1/H.323/H.225 stack of VocalTec VGW120 and VGW480 allows remote attackers to cause a denial of service.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vgw120_telephony_gateway, vgw480_telephony_gateway
References: http://www.securityfocus.com/bid/10411, http://www.securitylab.ru/45401.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/16240
CVE-2004-1052
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: bnc, debian_linux, linux
References: http://marc.info/?l=bugtraq&m=110011817627839&w=2, http://secunia.com/advisories/13149/, http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03
CVE-2004-1850
The Rage 1.01 and earlier allows remote attackers to cause a denial of service (infinite loop) via a TCP packet with the port and IP address set to zero.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: the_rage
References: http://aluigi.altervista.org/adv/ragefreeze-adv.txt, http://marc.info/?l=bugtraq&m=108006680013576&w=2, http://securitytracker.com/id?1009540
CVE-2004-0465
Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCP_USER parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: webconnect
References: http://marc.info/?l=bugtraq&m=110910838600145&w=2, http://secunia.com/advisories/14006/, http://www.cirt.dk/advisories/cirt-29-advisory.pdf
CVE-2004-0218
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
References: http://marc.info/?l=bugtraq&m=108008530028019&w=2, http://secunia.com/advisories/11156, http://www.kb.cert.org/vuls/id/349113
CVE-2004-2031
Cross-site scripting (XSS) vulnerability in user.php in e107 allows remote attackers to inject arbitrary web script or HTML via the (1) URL, (2) MSN, or (3) AIM fields.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: e107
References: http://marc.info/?l=bugtraq&m=108541119526279&w=2, http://secunia.com/advisories/11696, http://www.osvdb.org/6410
CVE-2004-1891
The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc, ftp://patches.sgi.com/support/free/security/advisories/20040401-01-P.asc
CVE-2004-2262
ImageManager in e107 before 0.617 does not properly check the types of uploaded files, which allows remote attackers to execute arbitrary code by uploading a PHP file via the upload parameter to images.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: e107
Related CWEs: CWE-434
Related CAPECs: CAPEC-1
MITRE ATT&CK Techniques: T1574.010
MITRE ATT&CK Tactics: T1574
References: http://e107.org/comment.php?comment.news.672, http://secunia.com/advisories/13657, http://securitytracker.com/id?1012657
CWE: CWE-434
MITRE ATT&CK techniques: T1574.010
MITRE ATT&CK tactics: T1574
CVE-2004-2134
Oracle toplink mapping workBench uses a weak encryption algorithm for passwords, which allows local users to decrypt the passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: application_server
References: http://marc.info/?l=bugtraq&m=107531028325112&w=2, http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=803&lngWId=5, http://www.securityfocus.com/archive/1/352315/30/21430/threaded
CVE-2004-1869
Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (crash) by sending a packet that specifies the size for the next packet, then sending a larger packet than specified, which causes Etherlords to read unallocated memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: etherlords_ii, etherlords
References: http://aluigi.altervista.org/adv/ethboom-adv.txt, http://marc.info/?l=bugtraq&m=108024309814423&w=2, http://www.securityfocus.com/bid/9979
CVE-2004-2073
Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux-vserver
References: http://secunia.com/advisories/10816, http://www.linux-vserver.org/index.php?page=ChangeLog, http://www.osvdb.org/3875
CVE-2004-0916
Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: cabextract
References: http://secunia.com/advisories/12882/, http://www.debian.org/security/2004/dsa-574, http://www.kyz.uklinux.net/cabextract.php#changes
CVE-2004-2477
DiamondCS Process Guard Free 2.000 allows local users to disable the process guard protection system by overwriting the current Service Descriptor Table (SDT) in \device\physicalmemory with the original SDT found in ntoskrnl.exe.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: process_guard_free
References: http://secunia.com/advisories/12033, http://www.osvdb.org/7606, http://www.security.org.sg/vuln/procguard.html
CVE-2004-1781
Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CREDITCARD_CHARGE command.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: surfnet
References: http://www.securityfocus.com/bid/9348, http://www.securityfocus.com/bid/9348
CVE-2004-0009
Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the "one-line DN" of the target user.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: apache-ssl
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016870.html, http://marc.info/?l=bugtraq&m=107619127531765&w=2, http://www.apache-ssl.org/advisory-20040206.txt
CVE-2004-1837
Cross-site scripting (XSS) vulnerability in Mod_survey 3.0.x before 3.0.16-pre2 and 3.2.x before 3.2.0-pre4 allows remote attackers to inject arbitrary web script or HTML via the certain survey fields or error messages for malformed query strings.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mod_survey
References: http://marc.info/?l=bugtraq&m=107997967421972&w=2, http://securitytracker.com/id?1009516, http://www.securityfocus.com/bid/9941
CVE-2004-2048
radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "jstwo" password, which allows remote attackers to gain access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: thintune_xm, thintune_xs, thintune_mobile, thintune_extreme, thintune_s
References: http://marc.info/?l=bugtraq&m=109068491801021&w=2, http://secunia.com/advisories/12154, http://securitytracker.com/id?1010770
CVE-2004-1730
Cross-site scripting (XSS) vulnerability in Mantis bugtracker allows remote attackers to inject arbitrary web script or HTML via (1) the return parameter to login_page.php, (2) e-mail field in signup.php, (3) action parameter to login_select_proj_page.php, or (4) hide_status parameter to view_all_set.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: mantis
References: http://marc.info/?l=bugtraq&m=109312225727345&w=2, http://secunia.com/advisories/12338, http://www.securityfocus.com/bid/10994
CVE-2004-1793
Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: switch_off
References: http://secunia.com/advisories/10521, http://securitytracker.com/id?1008581, http://www.elitehaven.net/switchoff.txt
CVE-2004-1682
Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rtp
References: http://marc.info/?l=bugtraq&m=109511327005476&w=2, http://secunia.com/advisories/12533, http://www.rfdslabs.com.br/qnx-advs-04-2004.txt
CVE-2004-1442
Cross-site scripting (XSS) vulnerability in db2www CGI interpreter in IBM Net.Data 7 and 7.2 allows remote attackers to inject arbitrary web script or HTML via a macro filename, which is not properly handled by error messages such as "DTWP001E."
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: net.data
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0019.html, http://secunia.com/advisories/10709/, http://secunia.com/secunia_research/2004-1/advisory/
CVE-2004-1675
Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command with an MS-DOS device name argument such as (1) COM1, (2) LPT1, (3) PRN, or (4) AUX.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: serv-u_file_server
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://marc.info/?l=bugtraq&m=109495074211638&w=2, http://secunia.com/advisories/12507/, http://www.securityfocus.com/bid/11155
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-2677
Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: qwikmail_smtp
References: http://qwikmail.sourceforge.net/smtpd/qwik-smtpd-0.3.patch, http://secunia.com/advisories/13037, http://securitytracker.com/id?1012016
CVE-2004-1201
Opera 7.54 allows remote attackers to cause a denial of service (application crash from memory exhaustion), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: opera_browser
Related CWEs: CWE-400
Related CAPECs: CAPEC-147, CAPEC-492, CAPEC-227
MITRE ATT&CK Techniques: T1499
References: http://marc.info/?l=full-disclosure&m=110141347502530&w=2, http://marc.info/?l=full-disclosure&m=110144136213993&w=2, http://www.securityfocus.com/bid/11762
CWE: CWE-400
MITRE ATT&CK techniques: T1499
CVE-2004-1441
Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS v2.0 Score: 9.3 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Affected Products: board_power
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0642.html, http://www.kb.cert.org/vuls/id/744590, http://www.securityfocus.com/bid/10734
CVE-2004-1695
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to bypass authentication for the remote administration feature via a URL that contains an extra leading / (slash).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: server4
References: http://marc.info/?l=bugtraq&m=109577497718374&w=2, http://secunia.com/advisories/12616, http://www.gulftech.org/?node=research&article_id=00051-09202004
CVE-2004-0994
Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c.  NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer.  Therefore, they should be regarded as distinct.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: zgv_image_viewer, debian_linux, xzgv_image_viewer
References: http://marc.info/?l=bugtraq&m=110297198402077&w=2, http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff, http://www.debian.org/security/2004/dsa-614
CVE-2004-2034
Buffer overflow in the (1) WTHoster and (2) WebDriver modules in WildTangent Web Driver 4.0 allows remote attackers to execute arbitrary code via a long filename.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webdriver
References: http://marc.info/?l=bugtraq&m=108569235217149&w=2, http://secunia.com/advisories/11727, http://www.ngssoftware.com/advisories/wildtangent.txt
CVE-2004-1120
Multiple buffer overflows in (1) http.c, (2) http-retr.c, (3) main.c and other code that handles network protocols in ProZilla 1.3.6-r2 and earlier allow remote servers to execute arbitrary code via a long Location header.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: prozilla_download_accelerator
References: http://bugs.gentoo.org/show_bug.cgi?id=70090, http://www.debian.org/security/2005/dsa-663, http://www.gentoo.org/security/en/glsa/glsa-200411-31.xml
CVE-2004-1681
Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: photon_microgui, rtp
References: http://marc.info/?l=bugtraq&m=109510393407597&w=2, http://www.rfdslabs.com.br/qnx-advs-03-2004.txt, http://www.securityfocus.com/bid/11164
CVE-2004-1288
Buffer overflow in the parse_html function in o3read.c for o3read 0.0.3 allows remote attackers to execute arbitrary code via a crafted SXW file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: o3read
References: http://tigger.uic.edu/~jlongs2/holes/o3read.txt, http://www.gentoo.org/security/en/glsa/glsa-200501-20.xml, https://exchange.xforce.ibmcloud.com/vulnerabilities/18547
CVE-2004-0684
WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: websphere_edge_server_caching_proxy, websphere_caching_proxy_server
References: http://marc.info/?l=bugtraq&m=108938997528245&w=2, http://www.cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf, https://exchange.xforce.ibmcloud.com/vulnerabilities/16607
CVE-2004-1411
Gadu-Gadu build 155 and earlier allows remote attackers to cause a denial of service (infinite loop) via a message that contains an image whose filename does not start with restricted characters.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=110330741828726&w=2, http://www.securityfocus.com/bid/11998, https://exchange.xforce.ibmcloud.com/vulnerabilities/18580
CVE-2004-1616
Links allows remote attackers to cause a denial of service (memory consumption) via a web page or HTML email that contains a table with a td element and a large rowspan value,as demonstrated by mangleme.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: links
References: http://lcamtuf.coredump.cx/mangleme/gallery/, http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html, http://marc.info/?l=bugtraq&m=109811406620511&w=2
CVE-2004-0519
Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: propack, squirrelmail
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000858, http://marc.info/?l=bugtraq&m=108334862800260
CVE-2004-0268
Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1) a long cd command to the FTP server, or (2) a long dir command to the telnet server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: evolutionx
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016988.html, http://marc.info/?l=bugtraq&m=107643394724891&w=2, http://www.securityfocus.com/bid/9631
CVE-2004-2630
The MIME transformation system (transformations/text_plain__external.inc.php) in phpMyAdmin 2.5.0 up to 2.6.0-pl1 allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpmyadmin
References: http://marc.info/?l=bugtraq&m=109816584519779&w=2, http://marc.info/?l=full-disclosure&m=109810251501643&w=2, http://secunia.com/advisories/12813
CVE-2004-0609
rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: rssh
References: http://marc.info/?l=bugtraq&m=108787373022844&w=2, http://www.securityfocus.com/bid/10574, https://exchange.xforce.ibmcloud.com/vulnerabilities/16470
CVE-2004-0283
Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mailmgr
References: http://marc.info/?l=bugtraq&m=107665013714517&w=2, http://www.securityfocus.com/bid/9654, https://exchange.xforce.ibmcloud.com/vulnerabilities/15203
CVE-2004-2023
SQL injection vulnerability in login.php in Zen Cart 1.1.2d, 1.1.4 before patch 1, and possibly other versions allows remote attackers to execute arbitrary SQL via the (1) admin_name or (2) admin_pass parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zen_cart
References: http://marc.info/?l=bugtraq&m=108489697219781&w=2, http://secunia.com/advisories/11649, http://securitytracker.com/id?1010172
CVE-2004-0604
The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: gift-fasttrack, linux
References: http://developer.berlios.de/bugs/?func=detailbug&bug_id=1573&group_id=809, http://gift-fasttrack.berlios.de/, http://secunia.com/advisories/11941/
CVE-2004-2246
Cross-site scripting (XSS) vulnerability in Goollery before 0.04b allows remote attackers to inject arbitrary HTML or web script via the conversation_id parameter to viewpic.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: goollery
References: http://www.osvdb.org/11624, http://www.osvdb.org/ref/11/11624-goollery-viewpic.txt, http://www.osvdb.org/11624
CVE-2004-0541
Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: squid_web_proxy_cache
References: ftp://patches.sgi.com/support/free/security/advisories/20040604-01-U.asc, http://fedoranews.org/updates/FEDORA--.shtml, http://www.gentoo.org/security/en/glsa/glsa-200406-13.xml
CVE-2004-1717
Multiple buffer overflows in the psscan function in ps.c for gv (ghostview) allow remote attackers to execute arbitrary code via a Postscript file with a long (1) BoundingBox, (2) comment, (3) Orientation, (4) PageOrder, or (5) Pages value.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gv
References: http://marc.info/?l=bugtraq&m=109267677114331&w=2, http://www.securityfocus.com/bid/10944, https://exchange.xforce.ibmcloud.com/vulnerabilities/17019
CVE-2004-0106
Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openbsd, x11r6
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000821, http://marc.info/?l=bugtraq&m=110979666528890&w=2, http://www.debian.org/security/2004/dsa-443
CVE-2004-2169
Application Access Server (A-A-S) 1.0.37 and earlier allows remote authenticated users to cause a denial of service (application crash) via a long file request.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: a-a-s_application_access_server
References: http://members.lycos.co.uk/r34ct/main/A-A-S/AAS1_0_3.TXT, http://www.secunia.com/advisories/10762/, https://exchange.xforce.ibmcloud.com/vulnerabilities/15003
CVE-2004-0078
Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mutt
References: ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2004-013.0.txt, http://bugs.debian.org/126336, http://marc.info/?l=bugtraq&m=107651677817933&w=2
CVE-2004-2342
ChatterBox 2.0 allows remote attackers to cause a denial of service (server crash) via a malformed request to the server, as demonstrated using "aaaaaa".
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: chatterbox
References: http://secunia.com/advisories/10775, http://www.autistici.org/fdonato/advisory/ChatterBox2.0-adv.txt, http://www.osvdb.org/3798
CVE-2004-0766
NGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an invalid address for the BaseAddress parameter to the hooks for the (1) ZwAllocateVirtualMemory or (2) ZwProtectVirtualMemory functions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: stackdefender
References: http://www.idefense.com/application/poi/display?id=119&type=vulnerabilities&flashstatus=false, https://exchange.xforce.ibmcloud.com/vulnerabilities/16892, http://www.idefense.com/application/poi/display?id=119&type=vulnerabilities&flashstatus=false
CVE-2004-2590
Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, related to regular expressions.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cute_php_library
References: http://prdownloads.sourceforge.net/cphplib/cphplib-0.47.tar.gz?download, http://securitytracker.com/id?1011076, http://www.meindlsoft.com/cphplib_changelog.php
CVE-2004-1522
Format string vulnerability in Army Men RTS 1.0 allows remote attackers to cause a denial of service (application crash) via a nickname that contains format strings.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: army_men_real_time_strategy_game
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028757.html, http://marc.info/?l=bugtraq&m=110053709800174&w=2, http://secunia.com/advisories/13186
CVE-2004-0270
libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: clamav
References: http://marc.info/?l=bugtraq&m=107634700823822&w=2, http://security.gentoo.org/glsa/glsa-200402-07.xml, http://www.freebsd.org/cgi/query-pr.cgi?pr=62586
CVE-2004-0096
Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mod_python
References: http://security.gentoo.org/glsa/glsa-200401-03.xml, http://www.modpython.org/pipermail/mod_python/2004-January/014879.html, http://www.redhat.com/support/errata/RHSA-2004-058.html
CVE-2004-0700
Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mod_ssl, linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857, http://marc.info/?l=apache-modssl&m=109001100906749&w=2, http://marc.info/?l=bugtraq&m=109005001205991&w=2
CVE-2004-1814
Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. (dot dot) sequences in an HTTP request, as demonstrated using home.asp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vgw4_8_telephony_gateway
References: http://marc.info/?l=bugtraq&m=107936739131657&w=2, http://www.securityfocus.com/bid/9876, https://exchange.xforce.ibmcloud.com/vulnerabilities/15476
CVE-2004-2137
Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: outlook_express
References: http://secunia.com/advisories/12376, http://securitytracker.com/id?1011067, http://support.microsoft.com/kb/843555