DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1687
CRLF injection vulnerability in down.asp for Snitz Forums 2000 3.4.04 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the location parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: snitz_forums_2000
References: http://forum.snitz.com/forum/topic.asp?ARCHIVE=true&TOPIC_ID=54791, http://marc.info/?l=bugtraq&m=109537195413691&w=2, http://secunia.com/advisories/12590
CVE-2004-0429
Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/May/msg00000.html, http://marc.info/?l=bugtraq&m=108369640424244&w=2, http://secunia.com/advisories/11539/
CVE-2004-1265
Buffer overflow in the readObjectChunk function in 3dsimp.cpp for the convex-tool program in Convex 3D 0.8pre1 allows remote attackers to execute arbitrary code via a crafted 3DS file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: convex_3d
References: http://tigger.uic.edu/~jlongs2/holes/convex3d.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18601, http://tigger.uic.edu/~jlongs2/holes/convex3d.txt
CVE-2004-1752
Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaucho
References: http://marc.info/?l=bugtraq&m=109364123707953&w=2, http://secunia.com/advisories/12387, http://securitytracker.com/id?1011032
CVE-2004-1785
SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: invision_board
References: http://forums.invisionpower.com/index.php?act=ST&f=1&t=108786, http://secunia.com/advisories/10530, http://www.osvdb.org/3319
CVE-2004-1945
Buffer overflow in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: exchange_pop3
References: http://marc.info/?l=bugtraq&m=108247921402458&w=2, http://marc.info/?l=bugtraq&m=108568462428096&w=2, http://secunia.com/advisories/11449
CVE-2004-0653
Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: solaris
References: http://secunia.com/advisories/11940/, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57587, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101519-1
CVE-2004-0122
Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: msn_messenger
References: http://www.kb.cert.org/vuls/id/688094, http://www.securityfocus.com/bid/9828, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-010
CVE-2004-1552
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: aspwebcalendar
References: http://marc.info/?l=bugtraq&m=109604910025090&w=2, http://secunia.com/advisories/12651, http://secunia.com/advisories/24622
CVE-2004-0221
isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: openbsd
Related CWEs: CWE-125
Related CAPECs: CAPEC-540
References: http://marc.info/?l=bugtraq&m=108008530028019&w=2, http://www.kb.cert.org/vuls/id/524497, http://www.openbsd.org/errata.html
CWE: CWE-125
CVE-2004-2289
Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_xp
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0168.html, http://secunia.com/advisories/11633, http://www.freewebs.com/roozbeh_afrasiabi/xploit/execute.htm
CVE-2004-1960
Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote attackers to inject arbitrary web script or HTML via the (1) target or (2) portNum parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: protector_system
References: http://protector.warcenter.se/article-53--0-0.html, http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0, http://www.securityfocus.com/bid/10206
CVE-2004-0516
Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-2004-0517.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.seifried.org/pipermail/security/2004-May/003743.html, http://securitytracker.com/id?1010331, http://www.securityfocus.com/bid/10432
CVE-2004-2290
Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_xp
References: http://archives.neohapsis.com/archives/bugtraq/2004-01/0267.html, http://secunia.com/advisories/10708, http://securitytracker.com/id?1008843
CVE-2004-0922
AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x_server, quicktime, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html, http://www.securityfocus.com/bid/11322, http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE-2004-0029
Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lotus_domino
References: http://marc.info/?l=bugtraq&m=107340897710308&w=2, http://secunia.com/advisories/10566, http://www.excluded.org/advisories/advisory05.txt
CVE-2004-1995
Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm.
CVSS v3.1 Score: 6.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fusetalk
Related CWEs: CWE-352
Related CAPECs: CAPEC-467, CAPEC-111, CAPEC-462
References: http://marc.info/?l=bugtraq&m=108377423825478&w=2, http://secunia.com/advisories/11555, http://securitytracker.com/id?1010080
CWE: CWE-352
CVE-2004-1464
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
CVSS v3.1 Score: 5.9 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ios
Related CWEs: CWE-400
Related CAPECs: CAPEC-147, CAPEC-492, CAPEC-227
MITRE ATT&CK Techniques: T1499
WARNING: This vulnerability is in CISA's Known Exploited Vulnerabilities (KEV) catalog
References: http://secunia.com/advisories/12395/, http://securitytracker.com/id?1011079, http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml
CWE: CWE-400
MITRE ATT&CK techniques: T1499
CVE-2004-2268
PimenGest2 before 1.1.1 allows remote attackers to obtain the database password via debug information in rowLatex.inc.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pimengest2
References: ftp://ftp.pimentech.net/src/pimengest2/debian/changelog, http://securitytracker.com/id?1010257, http://www.osvdb.org/6324
CVE-2004-1074
The binfmt functionality in the Linux kernel, when "memory overcommit" is enabled, allows local users to cause a denial of service (kernel oops) via a malformed a.out binary.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, suse_linux, secure_linux, linux_kernel, linux_advanced_workstation
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930, http://marc.info/?l=bugtraq&m=110322596918807&w=2, http://marc.info/?l=linux-kernel&m=110021173607372&w=2
CVE-2004-2162
Multiple cross-site scripting (XSS) vulnerabilities in TUTOS 1.1 allow remote attackers to inject arbitrary web script or HTML via (1) the search field of the Address Module or (2) the t parameter to app_new.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: tutos
References: http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/app_new.php?r1=1.58&r2=1.59, http://secunia.com/advisories/12606/, http://secunia.com/advisories/18954
CVE-2004-2541
Buffer overflow in Cscope 15.5, and possibly multiple overflows, allows remote attackers to execute arbitrary code via a C file with a long #include line that is later browsed by the target.
CVSS v2.0 Score: 6.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Affected Products: cscope
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://docs.info.apple.com/article.html?artnum=306172, http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html, http://secunia.com/advisories/13237
CWE: CWE-119
CVE-2004-2569
ipmenu 0.0.3 before Debian GNU/Linux ipmenu_0.0.3-5 allows local users to overwrite arbitrary files via a symlink attack on the ipmenu.log temporary file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ipmenu
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=244709, http://secunia.com/advisories/11526, http://secunia.com/advisories/17682
CVE-2004-2070
The Altiris Client Service for Windows 5.6 SP1 Hotfix E (5.6.181) allows local users to execute arbitrary commands by opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2005-1590.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: client_service
References: http://www.securityfocus.com/archive/1/381649, http://www.securityfocus.com/archive/1/381649
CVE-2004-1762
Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: f-secure_anti-virus
References: http://secunia.com/advisories/11089, http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml, http://www.kb.cert.org/vuls/id/415734
CVE-2004-1166
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ie, internet_explorer
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://marc.info/?l=bugtraq&m=110253463305359&w=2, http://secunia.com/advisories/13404, http://secunia.com/advisories/29346
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2004-0380
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: outlook_express
References: http://secunia.com/advisories/10523, http://www.k-otik.net/bugtraq/02.18.InternetExplorer.php, http://www.kb.cert.org/vuls/id/323070
CVE-2004-1978
Cross-site scripting (XSS) vulnerability in help.php in Moodle before 1.3 allows remote attackers to inject arbitrary HTML and web script via the text parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: moodle
References: http://marc.info/?l=bugtraq&m=108335043825605&w=2, http://secunia.com/advisories/11535, http://securitytracker.com/id?1010008
CVE-2004-2116
Directory traversal vulnerability in Tiny Server 1.1 allows remote attackers to read or download arbitrary files via a .. (dot dot) in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tinyserver
References: http://marc.info/?l=bugtraq&m=107496530806730&w=2, http://packetstormsecurity.com/files/129320/Tiny-Server-1.1.9-Arbitrary-File-Disclosure.html, http://secunia.com/advisories/10707
CVE-2004-0353
Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: anubis
References: http://mail.gnu.org/archive/html/bug-anubis/2004-02/msg00000.html, http://marc.info/?l=bugtraq&m=107843915424588&w=2, http://marc.info/?l=bugtraq&m=107894315012081&w=2
CVE-2004-1468
The web mail functionality in Usermin 1.x and Webmin 1.x allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: usermin, webmin
References: http://secunia.com/advisories/12488/, http://www.gentoo.org/security/en/glsa/glsa-200409-15.xml, http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/77_e.html
CVE-2004-0555
Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: queue
References: http://securitytracker.com/id?1012929, http://www.debian.org/security/2005/dsa-643, https://exchange.xforce.ibmcloud.com/vulnerabilities/18945
CVE-2004-0705
Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: bugzilla
References: http://bugzilla.mozilla.org/show_bug.cgi?id=235265, http://marc.info/?l=bugtraq&m=108965446813639&w=2, http://www.securityfocus.com/bid/10698
CVE-2004-0372
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: xine
References: http://marc.info/?l=bugtraq&m=107997911025558&w=2, http://security.gentoo.org/glsa/glsa-200404-20.xml, http://www.debian.org/security/2004/dsa-477
CVE-2004-1212
Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: blog_torrent_preview
References: http://cvs.sourceforge.net/viewcvs.py/battletorrent/btorrent_server/btdownload.php?r1=1.6&r2=1.7, http://marc.info/?l=bugtraq&m=110200971917165&w=2, http://www.securityfocus.com/bid/11795
CVE-2004-2015
Cross-site scripting (XSS) vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or web script via (1) iframe, (2) img, or (3) object tags.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webct
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0851.html, http://marc.info/?l=bugtraq&m=108481256731404&w=2, http://www.securityfocus.com/bid/10357
CVE-2004-2229
Multiple unknown vulnerabilities in Oracle 9i Lite Mobile Server 5.0.0.0.0 through 5.0.2.9.0 allow remote authenticated users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: database_server_lite
References: http://otn.oracle.com/deploy/security/pdf/2004alert63.pdf, http://secunia.com/advisories/10938, http://www.osvdb.org/4022
CVE-2004-2445
Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. (dot dot) in the gadget parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jaws
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0226.html, http://securitytracker.com/id?1010651, http://www.osvdb.org/7722
CVE-2004-0870
KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: konqueror
References: http://securityfocus.com/archive/1/375407, http://securitytracker.com/id?1011330, http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt
CVE-2004-2665
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.00, B.11.04, and B.11.11 before 20040628 allows local users to cause a denial of service via unspecified vectors.
CVSS v2.0 Score: 4.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Affected Products: hp-ux
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=PSD_HPSBUX01054, http://secunia.com/advisories/11970, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5694
CVE-2004-0992
Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: proxytunnel
References: http://proxytunnel.sourceforge.net/news.html, http://www.gentoo.org/security/en/glsa/glsa-200411-07.xml, http://www.securityfocus.com/bid/11592
CVE-2004-2715
edituser.php3 in PHPMyChat 0.14.5 allow remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpmychat
Related CWEs: CWE-287
Related CAPECs: CAPEC-151, CAPEC-94, CAPEC-593
MITRE ATT&CK Techniques: T1134, T1550.001, T1557
MITRE ATT&CK Tactics: T1550, T1505
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0252.html, http://secunia.com/advisories/11894, http://securitytracker.com/id?1010515
CWE: CWE-287
MITRE ATT&CK techniques: T1134, T1550.001, T1557, T1185, T1505.003, T1548, T1563, T1040
MITRE ATT&CK tactics: T1550, T1505
CVE-2004-2208
CRLF injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to conduct HTTP response splitting attacks via unknown vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: idealbb
References: http://www.maxpatrol.com/advdetails.asp?id=14, http://www.maxpatrol.com/mp_advisory.asp, http://www.securityfocus.com/bid/11424
CVE-2004-0255
Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: xlight_ftp_server
References: http://marc.info/?l=bugtraq&m=107605633904122&w=2, http://www.securityfocus.com/bid/9585, https://exchange.xforce.ibmcloud.com/vulnerabilities/15064
CVE-2004-0488
Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: enterprise_linux_server, debian_linux, http_server, enterprise_linux_workstation
Related CWEs: CWE-787
References: ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.html, http://marc.info/?l=bugtraq&m=108567431823750&w=2
CWE: CWE-787
CVE-2004-2671
mod.php in eNdonesia 8.3 allows remote attackers to obtain sensitive information via certain direct requests, and certain requests with invalid parameter values, which reveal the path in various error messages, as demonstrated by the (1) mod and (2) cid parameters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: endonesia
References: http://echo.or.id/adv/adv02-y3dips-2004.txt, http://secunia.com/advisories/12231, http://securitytracker.com/id?1010864
CVE-2004-1446
Unknown vulnerability in ScreenOS in Juniper Networks NetScreen firewall 3.x through 5.x allows remote attackers to cause a denial of service (device reboot or hang) via a crafted SSH v1 packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netscreen_screenos
References: http://secunia.com/advisories/12208/, http://www.juniper.net/support/security/alerts/screenos-sshv1-2.txt, http://www.kb.cert.org/vuls/id/749870
CVE-2004-2321
BEA WebLogic Server and Express 8.1 SP1 and earlier allows local users in the Operator role to obtain administrator passwords via MBean attributes, including (1) ServerStartMBean.Password and (2) NodeManagerMBean.CertificatePassword.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: weblogic_server
References: http://dev2dev.bea.com/pub/advisory/1, http://www.securityfocus.com/bid/9505, http://www.securitytracker.com/alerts/2004/Jan/1008867.html
CVE-2004-1488
wget 1.8.x and 1.9.x does not filter or quote control characters when displaying HTTP responses to the terminal, which may allow remote malicious web servers to inject terminal escape sequences and execute arbitrary code.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: wget
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755, http://marc.info/?l=bugtraq&m=110269474112384&w=2, http://secunia.com/advisories/20960
CVE-2004-0574
The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_nt, windows_server_2003, exchange_server
Related CWEs: CWE-787
References: http://marc.info/?l=bugtraq&m=109761632831563&w=2, http://www.ciac.org/ciac/bulletins/p-012.shtml, http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10
CWE: CWE-787
CVE-2004-0275
SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bosdates
References: http://marc.info/?l=bugtraq&m=107651618613575&w=2, http://www.securityfocus.com/bid/9639, http://www.zone-h.org/en/advisories/read/id=3925/
CVE-2004-2202
Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (1) cat_id or (2) sub_id parameters in adDetail.asp, or (2) the password parameter in the login form.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: duclassified
References: http://www.osvdb.org/10668, http://www.osvdb.org/10669, http://www.securityfocus.com/bid/11363
CVE-2004-1755
The Web Services fat client for BEA WebLogic Server and Express 7.0 SP4 and earlier, when using 2-way SSL and multiple certificates to connect to the same URL, may use the incorrect identity after the first connection, which could allow users to gain privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_47.00.jsp, http://secunia.com/advisories/10725, http://www.kb.cert.org/vuls/id/858990
CVE-2004-1031
fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux, fcron
References: http://security.gentoo.org/glsa/glsa-200411-27.xml, http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false, http://www.securityfocus.com/bid/11684
CVE-2004-1078
Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: program_neighborhood_agent, metaframe_client
References: http://secunia.com/advisories/15108, http://support.citrix.com/kb/entry.jspa?externalID=CTX105650, http://www.idefense.com/application/poi/display?id=238&type=vulnerabilities
CVE-2004-0457
The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mysql
References: http://packages.debian.org/changelogs/pool/main/m/mysql-dfsg/mysql-dfsg_4.0.20-11/changelog, http://www.ciac.org/ciac/bulletins/p-018.shtml, http://www.debian.org/security/2004/dsa-540
CVE-2004-2330
ColdFusion MX 6.1 and 6.1 J2EE allows remote attackers to cause a denial of service via an HTTP request containing a large number of form fields.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: coldfusion
References: http://secunia.com/advisories/10743/, http://www.macromedia.com/devnet/security/security_zone/mpsb04-02.html, http://www.securityfocus.com/bid/9522
CVE-2004-2610
mntd_mount.c in mntd before 0.4.2 might allow local users to gain privileges via shell metacharacters in a remount option in the configuration file.  NOTE: It is not clear whether this is a vulnerability because there is not necessarily any common usage in which privilege boundaries are crossed.  Typical usage would restrict write access to the configuration file.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mntd
References: http://prdownloads.sourceforge.net/mntd/mntd-0.4.2.tar.gz?download, http://securitytracker.com/id?1011088, http://www.osvdb.org/9380
CVE-2004-1690
Cross-site scripting (XSS) vulnerability in the Web Server in DNS4Me 3.0.0.4 allows remote attackers to execute arbitrary web script or HTML via the URL.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: dns4me
References: http://marc.info/?l=bugtraq&m=109552436811493&w=2, http://secunia.com/advisories/12595, http://securitytracker.com/id?1011334
CVE-2004-0433
Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xine-lib, mplayer
References: http://security.gentoo.org/glsa/glsa-200405-24.xml, http://www.xinehq.de/index.php/security/XSA-2004-3, https://exchange.xforce.ibmcloud.com/vulnerabilities/16019
CVE-2004-0668
Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail message, as demonstrated using a large image attachment.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: lotus_domino
References: http://marc.info/?l=bugtraq&m=108871093704307&w=2, http://www.securityfocus.com/bid/10641, https://exchange.xforce.ibmcloud.com/vulnerabilities/16596
CVE-2004-0975
The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mandrake_multi_network_firewall, mandrake_linux, mandrake_linux_corporate_server, linux, openssl
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136302, http://secunia.com/advisories/12973, http://www.debian.org/security/2004/dsa-603
CVE-2004-1861
Invision NetSupport School Pro uses a weak encryption algorithm to encrypt passwords, which allows local users to obtain passwords.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: netsupport_school
References: http://marc.info/?l=bugtraq&m=108032304932321&w=2, http://www.securityfocus.com/bid/9981, https://exchange.xforce.ibmcloud.com/vulnerabilities/15621
CVE-2004-1686
Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer ActiveX plugin.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ie
References: http://marc.info/?l=bugtraq&m=109539520310153&w=2, http://www.securityfocus.com/bid/11200, https://exchange.xforce.ibmcloud.com/vulnerabilities/20617
CVE-2004-1431
FormMail.php 5.0, and possibly other versions, allows remote attackers to read arbitrary files via a full pathname in the ar_file (auto-reply) parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jacks_formmail.php
References: http://marc.info/?l=bugtraq&m=110460092827419&w=2, http://secunia.com/advisories/10815, http://www.securityfocus.com/bid/12145
CVE-2004-2751
SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: postnuke
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html, http://community.postnuke.com/Article2535.htm, http://lists.postnuke.com/pipermail/postnuke-security/2004q1/000001.html
CWE: CWE-89
CVE-2004-1204
FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service (application crash) by calling Xman with a long -title value, possibly triggering a buffer overflow.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fluxbot
References: http://marc.info/?l=bugtraq&m=110149783715867&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18264, http://marc.info/?l=bugtraq&m=110149783715867&w=2
CVE-2004-1481
Integer overflow in pnen3260.dll in RealPlayer 8 through 10.5 (6.0.12.1040) and earlier, and RealOne Player 1 or 2 on Windows or Mac OS, allows remote attackers to execute arbitrary code via a SMIL file and a .rm movie file with a large length field for the data chunk, which leads to a heap-based buffer overflow.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: realplayer, realone_player, helix_player
References: http://marc.info/?l=ntbugtraq&m=109708374115061&w=2, http://secunia.com/advisories/12672, http://www.securityfocus.com/bid/11309
CVE-2004-1337
The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ubuntu_linux, realtime_linux_security_module, linux
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000930, http://marc.info/?l=bugtraq&m=110384535113035&w=2, http://www.securityfocus.com/bid/12093
CVE-2004-1606
slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might also leak sensitive information in the ErrorLogMsg cookie.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: saleslogix
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html, http://marc.info/?l=bugtraq&m=109811852218478&w=2, http://secunia.com/advisories/12883
CVE-2004-1109
The FWDRV.SYS driver in Kerio Personal Firewall 4.1.1 and earlier allows remote attackers to cause a denial of service (CPU consumption and system freeze from infinite loop) via a (1) TCP, (2) UDP, or (3) ICMP packet with a zero length IP Option field.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: personal_firewall
References: http://www.eeye.com/html/research/advisories/AD20041109.html, http://www.kerio.com/security_advisory.html, http://www.securityfocus.com/bid/11639
CVE-2004-2332
Multiple cross-site scripting (XSS) vulnerabilities in CPAN WWW::Form before 1.13 allow remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: www_form
References: http://secunia.com/advisories/10751, http://www.securiteam.com/unixfocus/5IP0L2KBPM.html, http://www.securityfocus.com/bid/9526
CVE-2004-0164
KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: racoon
References: ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2004-001.txt.asc, http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html, http://marc.info/?l=bugtraq&m=107403331309838&w=2
CVE-2004-1953
phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phprofession
References: http://marc.info/?l=bugtraq&m=108258931430060&w=2, http://secunia.com/advisories/11465, http://www.osvdb.org/5623
CVE-2004-1608
SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view operation.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: saleslogix
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0661.html, http://marc.info/?l=bugtraq&m=109811852218478&w=2, http://secunia.com/advisories/12883
CVE-2004-2726
HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackers to cause a denial of service (null dereference and application crash).  NOTE: This is a different vulnerability than CVE-2005-1348.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mailenable
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0159.html, http://secunia.com/advisories/11588, http://www.oliverkarow.de/research/MailWebHTTPAuthCrash.txt
CVE-2004-2240
Multiple SQL injection vulnerabilities in Phorum 5.0.11 and earlier allow remote attackers to modify SQL statements via (1) the query string in read.php or (2) unknown vectors in file.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phorum
References: http://phorum.org/cvs-changelog-5.txt, http://secunia.com/advisories/12980, http://securitytracker.com/id?1011921
CVE-2004-2083
Opera Web Browser 7.0 through 7.23 allows remote attackers to trick users into executing a malicious file by embedding a CLSID in the file name, which causes the malicious file to appear as a trusted file type, aka "File Download Extension Spoofing."
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: opera_browser
References: http://secunia.com/Internet_Explorer_File_Download_Extension_Spoofing_Test/, http://secunia.com/advisories/10760, http://www.opera.com/docs/changelogs/windows/750b1/
CVE-2004-1696
EmuLive Server4 Commerce Edition Build 7560 allows remote attackers to cause a denial of service (application crash) via a sequence of carriage returns sent to TCP port 66.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: server4
References: http://marc.info/?l=bugtraq&m=109577497718374&w=2, http://secunia.com/advisories/12616, http://www.gulftech.org/?node=research&article_id=00051-09202004
CVE-2004-2247
Unknown vulnerability in the "admin of paypal email addresses" in AudienceConnect before 1.0.beta.21 has unknown impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: audienceconnect
References: http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279700, http://www.osvdb.org/11443, http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279700
CVE-2004-0427
The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel
Related CWEs: CWE-401
References: ftp://patches.sgi.com/support/free/security/advisories/20040504-01-U.asc, ftp://patches.sgi.com/support/free/security/advisories/20040505-01-U.asc, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000846
CWE: CWE-401
CVE-2004-1780
Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: surfnet
References: http://www.securityfocus.com/bid/9347, http://www.securityfocus.com/bid/9347
CVE-2004-1356
Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sunos, solaris
References: http://secunia.com/advisories/11457/, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57470-1&searchclause=%22category:security%22%20%20108528-27, http://www.auscert.org.au/render.html?it=4056
CVE-2004-2422
Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the Queue Manager or (2) a long To field to the Web Messaging component.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://secunia.com/advisories/12453, http://securitytracker.com/id?1011146, http://support.ipswitch.com/kb/IM-20040902-DM01.htm#FIXES
CVE-2004-1884
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ws_ftp_server, ws_ftp_pro
References: http://marc.info/?l=bugtraq&m=108006581418116&w=2, http://secunia.com/advisories/11206, http://www.securityfocus.com/bid/9953
CVE-2004-1632
Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the arguments to wiki.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: moniwiki
References: http://marc.info/?l=bugtraq&m=109873622006103&w=2, http://secunia.com/advisories/12975, http://www.securityfocus.com/bid/11516
CVE-2004-2282
DansGuardian before 2.7.7-2 allows remote attackers to bypass URL filters via a ".." in the request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: dansguardian
References: http://dansguardian.org/?page=history, http://www.osvdb.org/5950, http://dansguardian.org/?page=history
CVE-2004-1316
Heap-based buffer overflow in MSG_UnEscapeSearchUrl in nsNNTPProtocol.cpp for Mozilla 1.7.3 and earlier allows remote attackers to cause a denial of service (application crash) via an NNTP URL (news:) with a trailing '\' (backslash) character, which prevents a string from being NULL terminated.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mozilla
References: http://isec.pl/vulnerabilities/isec-0020-mozilla.txt, http://marc.info/?l=bugtraq&m=110436284718949&w=2, http://marc.info/?l=bugtraq&m=110780717916478&w=2
CVE-2004-2318
The administrative interface (surgeftpmgr.cgi) for SurgeFTP Server 1.0b through 2.2k1 allows remote attackers to cause a temporary denial of service (crash) via requests with two percent (%) signs in the CMD parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: surgeftp
References: http://members.lycos.co.uk/r34ct/main/surge_FTP/surge-ftp.txt, http://securitytracker.com/id?1008898, http://www.osvdb.org/3788
CVE-2004-0838
Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: jumpdrive_secure
References: http://secunia.com/advisories/12522, http://www.atstake.com/research/advisories/2004/a091304-1.txt, http://www.securityfocus.com/bid/11162
CVE-2004-1923
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_directory.php, (4) tiki-directory_search.php, which reveal the web server path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: tikiwiki_cms//groupware
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://marc.info/?l=bugtraq&m=108180073206947&w=2, http://secunia.com/advisories/11344, http://tikiwiki.org/tiki-read_article.php?articleId=66
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2004-1569
Buffer overflow in (1) MusicConverter.exe, (2) playlist.exe, and (3) amp.exe in dBpowerAMP Audio Player 2.0 and dbPowerAmp Music Converter 10.0 allows remote attackers to cause a denial of service or execute arbitrary code via a .pls or .m3u playlist that contains long File1 (filename) fields.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:P
Affected Products: dbpoweramp_music_converter, dbpoweramp_audio_player
References: http://marc.info/?l=bugtraq&m=109668542406346&w=2, http://secunia.com/advisories/12684/, http://www.gulftech.org/?node=research&article_id=00052-09272004
CVE-2004-0036
SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: vbulletin
References: http://marc.info/?l=bugtraq&m=107340358202123&w=2, http://www.osvdb.org/3344, http://www.securityfocus.com/bid/9360
CVE-2004-1506
Multiple cross-site scripting (XSS) vulnerabilities in WebCalendar allow remote attackers to inject arbitrary web script via (1) view_entry.php, (2) view_d.php, (3) usersel.php, (4) datesel.php, (5) trailer.php, or (6) styles.php, as demonstrated using img srg tags.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: webcalendar
References: http://marc.info/?l=bugtraq&m=110011618724455&w=2, http://secunia.com/advisories/13164, http://www.securityfocus.com/bid/11651