DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0345
Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: red_faction
References: http://marc.info/?l=bugtraq&m=107816217901923&w=2, http://www.securityfocus.com/bid/9775, https://exchange.xforce.ibmcloud.com/vulnerabilities/15353
CVE-2004-0741
LionMax Software WWW File Share Pro 2.60 allows remote attackers to cause a denial of service (crash or hang) via a long URL, possibly triggering a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: www_file_share_pro
References: http://marc.info/?l=bugtraq&m=109035774701051&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16754, http://marc.info/?l=bugtraq&m=109035774701051&w=2
CVE-2004-2173
SQL injection vulnerability in advSearch_h.asp in EarlyImpact ProductCart allows remote attackers to execute arbitrary SQL commands via the priceUntil parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: productcart
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html, http://secunia.com/advisories/10898
CVE-2004-2754
SQL injection vulnerability in SSI.php in YaBB SE 1.5.4, 1.5.3, and possibly other versions before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the ID_MEMBER parameter to the (1) recentTopics and (2) welcome functions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: yabb_se
Related CWEs: CWE-89
Related CAPECs: CAPEC-7, CAPEC-470, CAPEC-108
References: http://securityreason.com/securityalert/3371, http://sourceforge.net/project/shownotes.php?release_id=210608&group_id=57105, http://www.osvdb.org/3618
CWE: CWE-89
CVE-2004-1147
phpMyAdmin 2.6.0-pl2, and other versions before 2.6.1, with external transformations enabled, allows remote attackers to execute arbitrary commands via shell metacharacters.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phpmyadmin
References: http://marc.info/?l=bugtraq&m=110295781828323&w=2, http://www.exaprobe.com/labs/advisories/esa-2004-1213.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/18441
CVE-2004-0404
logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:N
Affected Products: logcheck
References: http://secunia.com/advisories/11399, http://www.debian.org/security/2004/dsa-488, http://www.mandriva.com/security/advisories?name=MDKSA-2004:155
CVE-2004-0837
MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: debian_linux, mysql
References: http://bugs.mysql.com/2408, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892, http://lists.mysql.com/internals/16168
CVE-2004-1430
SQL injection vulnerability in the show_stats module in Arcade.php in IbProArcade allows remote attackers to execute arbitrary SQL code via the gameid parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ipbproarcade
References: http://marc.info/?l=bugtraq&m=110451448630711&w=2, http://secunia.com/advisories/13260, http://www.securityfocus.com/bid/12138
CVE-2004-1007
The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ubuntu_linux, email_filter
References: http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01, https://exchange.xforce.ibmcloud.com/vulnerabilities/17916, http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01
CVE-2004-0786
The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: http://secunia.com/advisories/12540, http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml, http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096
CVE-2004-0734
Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: extropia_webstore
References: http://marc.info/?l=bugtraq&m=109008402715874&w=2, http://www.securityfocus.com/bid/10744, https://exchange.xforce.ibmcloud.com/vulnerabilities/16710
CVE-2004-1822
Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.1 through 5.0.3 beta allow remote attackers to inject arbitrary web script or HTML via the (1) HTTP_REFERER parameter to login.php, (2) HTTP_REFERER parameter to register.php, or (3) target parameter to profile.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phorum
References: http://marc.info/?l=bugtraq&m=107939479713136&w=2, http://phorum.org/changelog.txt, http://secunia.com/advisories/11157
CVE-2004-1220
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a denial of service (client crash) via a server reply that contains a large numplayers value, which triggers a null dereference.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: battlefield_vietnam, battlefield_1942
References: http://marc.info/?l=bugtraq&m=110244662102167&w=2, http://www.securityfocus.com/bid/11838, https://exchange.xforce.ibmcloud.com/vulnerabilities/18400
CVE-2004-1728
Buffer overflow in British National Corpus SARA (sarad) allows remote attackers to execute arbitrary code by calling the client with a long string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sara
References: http://marc.info/?l=bugtraq&m=109308454122827&w=2, http://secunia.com/advisories/12348, http://www.securityfocus.com/bid/10984
CVE-2004-0743
Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/mhonarc/security-announce/msg00056.html, http://www.kb.cert.org/vuls/id/128414, https://exchange.xforce.ibmcloud.com/vulnerabilities/16944
CVE-2004-1367
Oracle 10g Database Server, when installed with a password that contains an exclamation point ("!") for the (1) DBSNMP or (2) SYSMAN user, generates an error that logs the password in the world-readable postDBCreation.log file, which could allow local users to obtain that password and use it against SYS or SYSTEM accounts, which may have been installed with the same password.
CVSS v2.0 Score: 4.4 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, oracle10g, oracle8i
Related CWEs: CWE-200
Related CAPECs: CAPEC-497, CAPEC-285, CAPEC-59
MITRE ATT&CK Techniques: T1036.005, T1574.007, T1217
MITRE ATT&CK Tactics: T1134, T1036, T1550
References: http://marc.info/?l=bugtraq&m=110382247308064&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.kb.cert.org/vuls/id/316206
CWE: CWE-200
MITRE ATT&CK techniques: T1036.005, T1574.007, T1217, T1590, T1135, T1069, T1057, T1124, T1595, T1134.001, T1087, T1033, T1574.006, T1111, T1120, T1592, T1016, T1046, T1082, T1049, T1083, T1550.004, T1615, T1007, T1562.003, T1018
MITRE ATT&CK tactics: T1134, T1036, T1550, T1562, T1574
CVE-2004-1826
SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mambo_open_source_4.5
References: http://marc.info/?l=bugtraq&m=107945576020593&w=2, http://secunia.com/advisories/11140, http://www.osvdb.org/4307
CVE-2004-0094
Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: x11r6
References: ftp://patches.sgi.com/support/free/security/advisories/20040406-01-U, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000824, http://www.debian.org/security/2004/dsa-443
CVE-2004-1416
pnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embed tag.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: realone_player, internet_explorer
References: http://marc.info/?l=bugtraq&m=110374765215675&w=2, http://www.osvdb.org/12660, http://marc.info/?l=bugtraq&m=110374765215675&w=2
CVE-2004-0357
Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via (1) user.dll, (2) loadpageadmin.dll or (3) loadpageuser.dll.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slmail_pro
References: http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf, http://marc.info/?l=bugtraq&m=107850432827699&w=2, http://www.nextgenss.com/advisories/slmailwm.txt
CVE-2004-0435
Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:11.msync.asc, http://secunia.com/advisories/11714, http://www.securityfocus.com/bid/10416
CVE-2004-2259
vsftpd before 1.2.2, when under heavy load, allows attackers to cause a denial of service (crash) via a SIGCHLD signal during a malloc or free call, which is not re-entrant.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: vsftpd
References: ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-1.2.2/Changelog, http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=119136, http://rhn.redhat.com/errata/RHBA-2004-164.html
CVE-2004-2580
Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Affected Products: ichain
References: http://secunia.com/advisories/12366, http://securitytracker.com/id?1011074, http://www.osvdb.org/9267
CVE-2004-1772
Stack-based buffer overflow in shar in GNU sharutils 4.2.1 allows local users to execute arbitrary code via a long -o command line argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sharutils
References: http://marc.info/?l=bugtraq&m=108137386310299&w=2, http://www.redhat.com/support/errata/RHSA-2005-377.html, http://www.securityfocus.com/archive/1/359639
CVE-2004-0453
Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format string specifiers in an output string.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vice
References: http://marc.info/?l=bugtraq&m=108723630730487&w=2, http://www.securityfocus.com/bid/10543, https://exchange.xforce.ibmcloud.com/vulnerabilities/16404
CVE-2004-2311
Directory traversal vulnerability in webadmin.nsf in Lotus Domino R6 6.5.1 allows local users to create folders or determine the existence of files via a .. (dot dot) in the new folder dialog.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: lotus_domino
References: http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt, http://secunia.com/advisories/11143, http://www.securityfocus.com/bid/9900
CVE-2004-0241
X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: x-cart
References: http://marc.info/?l=bugtraq&m=107582648326448&w=2, http://www.securityfocus.com/bid/9560, https://exchange.xforce.ibmcloud.com/vulnerabilities/15034
CVE-2004-0445
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: norton_internet_security, client_firewall, norton_antispam, client_security, norton_personal_firewall
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html, http://secunia.com/advisories/11066, http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html
CVE-2004-0347
Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows remote authenticated users to execute arbitrary script as other users via the row parameter.
CVSS v2.0 Score: 6.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Affected Products: netscreen-sa_5000_series
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-March/018120.html, http://marc.info/?l=bugtraq&m=107826362024112&w=2, http://marc.info/?l=bugtraq&m=107850564102190&w=2
CVE-2004-1267
Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbitrary code via a crafted HPGL file.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: fedora_core, cups
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://tigger.uic.edu/~jlongs2/holes/cups.txt, http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
CWE: CWE-119
CVE-2004-2102
Cross-site scripting (XSS) vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: freesco
References: http://marc.info/?l=bugtraq&m=107480309925905&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/14916, http://marc.info/?l=bugtraq&m=107480309925905&w=2
CVE-2004-1827
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: yabb, simple_machines_smf
References: http://marc.info/?l=bugtraq&m=107936800226430&w=2, http://marc.info/?l=bugtraq&m=107948064923981&w=2, http://secunia.com/advisories/11128
CVE-2004-0809
The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: enterprise_linux, debian_linux, http_server, secure_linux, linux
References: http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/dav/fs/lock.c?r1=1.32&r2=1.33, http://www.debian.org/security/2004/dsa-558, http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml
CVE-2004-0368
Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dextop, aix, cde_common_desktop_environment
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: ftp://patches.sgi.com/support/free/security/advisories/20040801-01-P, http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0064.html, http://lists.immunitysec.com/pipermail/dailydave/2004-March/000402.html
CWE: CWE-119
CVE-2004-0309
Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: integrity, zonealarm
References: http://download.zonelabs.com/bin/free/securityAlert/8.html, http://marc.info/?l=bugtraq&m=107722656827427&w=2, http://www.ciac.org/ciac/bulletins/o-084.shtml
CVE-2004-0885
The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: http_server
References: http://issues.apache.org/bugzilla/show_bug.cgi?id=31505, http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
CVE-2004-1153
Format string vulnerability in Adobe Acrobat Reader 6.0.0 through 6.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an .ETD document containing format string specifiers in (1) title or (2) baseurl fields.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: acrobat_reader
References: http://www.adobe.com/support/downloads/detail.jsp?ftpID=2679, http://www.idefense.com/application/poi/display?id=163&type=vulnerabilities, https://exchange.xforce.ibmcloud.com/vulnerabilities/18478
CVE-2004-0493
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: converged_communications_server, http_server, secure_linux, s8500, linux
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023133.html, http://marc.info/?l=bugtraq&m=108853066800184&w=2, http://marc.info/?l=bugtraq&m=109181600614477&w=2
CVE-2004-1483
Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: clientless_vpn_gateway_4400
References: ftp://ftp.symantec.com/public/english_us_canada/products/sym_clientless_vpn/sym_clientless_vpn_5/updates/hf3-readme.txt, http://secunia.com/advisories/12254/, http://www.kb.cert.org/vuls/id/760256
CVE-2004-1545
UploadFile.php in MoniWiki 1.0.9.2 and earlier, when used with Apache mod_mime, does not properly handle files with two file extensions, such as .php.hwp, which allows remote attackers to upload and execute arbitrary code.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: moniwiki
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-12/0448.html, http://kldp.net/scm/cvsweb.php/moniwiki/plugin/UploadFile.php.diff?cvsroot=moniwiki&only_with_tag=HEAD&r1=text&tr1=1.17&r2=text&tr2=1.16&f=h, http://marc.info/?l=bugtraq&m=110314544711884&w=2
CVE-2004-2474
SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpnews
References: http://newsphp.sourceforge.net/changelog/changelog_1.24.txt, http://secunia.com/advisories/13300, http://www.osvdb.org/12119
CVE-2004-2438
Cross-site scripting (XSS) vulnerability in PHP-Fusion 4.01 allows remote attackers to inject arbitrary web script or HTML via the (1) Submit News, (2) Submit Link or (3) Submit Article field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php_fusion
References: http://secunia.com/advisories/12686/, http://www.osvdb.org/10439, http://www.securityfocus.com/bid/11296
CVE-2004-0701
Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ray_server_software
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F53922, http://www.kb.cert.org/vuls/id/100780, http://www.securityfocus.com/bid/7457
CVE-2004-1115
The init scripts in Search for Extraterrestrial Intelligence (SETI) project 3.08-r3 and earlier execute user-owned programs with root privileges, which allows local users to gain privileges by modifying the programs.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux
References: http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml, https://exchange.xforce.ibmcloud.com/vulnerabilities/18149, http://www.gentoo.org/security/en/glsa/glsa-200411-26.xml
CVE-2004-2260
Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to other sites via the onUnload attribute.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: opera_browser
Related CWEs: CWE-601
Related CAPECs: CAPEC-178
References: http://secunia.com/advisories/11532, http://secunia.com/secunia_research/2004-2/advisory/, http://www.osvdb.org/6108
CWE: CWE-601
CVE-2004-1779
Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the lastvisited parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: thwboard_beta
References: http://cvs.sourceforge.net/viewcvs.py/thwb/thwb/board.php?r1=1.11&r2=1.12, http://secunia.com/advisories/10546, http://securitytracker.com/id?1008617
CVE-2004-0545
LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2, http://www.ciac.org/ciac/bulletins/o-131.shtml, http://www.securityfocus.com/bid/10230
CVE-2004-0716
Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows remote attackers to execute arbitrary code via a request with a small fragment length and a large amount of data.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: hp-ux
References: http://support.entegrity.com/private/patches/dce/ssrt4741.asp, http://www.atstake.com/research/advisories/2004/a072204-1.txt, http://www.kb.cert.org/vuls/id/259796
CVE-2004-1244
Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG Processing Vulnerability."
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_media_player
References: http://www.kb.cert.org/vuls/id/259890, http://www.us-cert.gov/cas/techalerts/TA05-039A.html, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-009
CVE-2004-1806
SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cfwebstore
References: http://marc.info/?l=bugtraq&m=107911090901744&w=2, http://secunia.com/advisories/11112, http://securitytracker.com/id?1009403
CVE-2004-0481
The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: sunos, solaris
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-57706-1, http://www.idefense.com/application/poi/display?id=206&type=vulnerabilities, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57706-1
CVE-2004-1033
Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: linux, fcron
References: http://security.gentoo.org/glsa/glsa-200411-27.xml, http://www.idefense.com/application/poi/display?id=157&type=vulnerabilities&flashstatus=false, http://www.securityfocus.com/bid/11684
CVE-2004-2670
Multiple cross-site scripting (XSS) vulnerabilities in mod.php in eNdonesia 8.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mod parameter in a viewcat operation or (2) the query parameter in a search operation in the publisher module.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: endonesia
References: http://echo.or.id/adv/adv02-y3dips-2004.txt, http://secunia.com/advisories/12231, http://securitytracker.com/id?1010864
CVE-2004-0151
Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xitalk
References: http://secunia.com/advisories/11114/, http://shellcode.org/Advisories/XITALK.txt, http://www.debian.org/security/2004/dsa-462
CVE-2004-1689
sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sudo
References: http://marc.info/?l=bugtraq&m=109537972929201&w=2, http://packetstormsecurity.nl/0409-exploits/sudoedit.txt, http://secunia.com/advisories/12596
CVE-2004-1089
Unknown vulnerability in Apple Mac OS X 10.3.6 server, when using Kerberos authentication and Cyrus IMAP allows local users to access mailboxes of other users.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: quicktime_streaming_server, darwin_streaming_server, mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://secunia.com/advisories/13362/, http://www.ciac.org/ciac/bulletins/p-049.shtml
CVE-2004-1854
Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code via a large packet.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: internet_telephone
References: http://aluigi.altervista.org/adv/picobof-adv.txt, http://marc.info/?l=bugtraq&m=108016032220647&w=2, http://secunia.com/advisories/11209
CVE-2004-1069
Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_sendmsg function.
CVSS v2.0 Score: 1.2 (LOW)
CVSS v2.0 Vector: AV:L/AC:H/Au:N/C:N/I:N/A:P
Affected Products: linux_kernel, ubuntu_linux
References: http://marc.info/?l=bugtraq&m=110306397320336&w=2, http://marc.info/?l=linux-kernel&m=110045613004761, http://www.mandriva.com/security/advisories?name=MDKSA-2005:022
CVE-2004-2195
PHP remote file inclusion vulnerability in index.php in Zanfi CMS lite 1.1 allows remote attackers to execute arbitrary PHP code via the inc parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: zanfi_cms_lite
References: http://secunia.com/advisories/12792, http://securitytracker.com/id?1011612, http://www.osvdb.org/10676
CVE-2004-2043
Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase codebase, allows remote attackers to cause a denial of service (crash) via a long database name, as demonstrated using the gsec command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: interbase, interbase_superserver, firebird
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0027.html, http://marc.info/?l=bugtraq&m=108611386202493&w=2, http://secunia.com/advisories/11756
CVE-2004-1226
SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to gain sensitive information via certain requests to scripts that contain invalid input, which reveals the path in an error message, as demonstrated using phprint.php with an empty module parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sugarcrm
References: http://marc.info/?l=bugtraq&m=110295433323795&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/18447, http://marc.info/?l=bugtraq&m=110295433323795&w=2
CVE-2004-1350
Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: java_system_web_proxy_server
References: http://secunia.com/advisories/13036/, http://securitytracker.com/id?1012005, http://sunsolve.sun.com/search/document.do?assetkey=1-26-57606-1&searchclause=security
CVE-2004-0940
Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.
CVSS v3.1 Score: 7.8 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 6.9 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Affected Products: suse_linux, http_server, secure_linux, hp-ux, openpkg
Related CWEs: CWE-131
Related CAPECs: CAPEC-100, CAPEC-47
References: http://marc.info/?l=bugtraq&m=109906660225051&w=2, http://secunia.com/advisories/12898/, http://secunia.com/advisories/19073
CWE: CWE-131
CVE-2004-2189
SQL injection vulnerability in DMXReady Site Chassis Manager allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: dmxready_site_chassis_manager
References: http://www.maxpatrol.com/mp_advisory.asp, http://www.securityfocus.com/bid/11434, http://www.maxpatrol.com/mp_advisory.asp
CVE-2004-1623
The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_xp
References: http://marc.info/?l=bugtraq&m=109846319313443&w=2, http://securitytracker.com/id?1011880, http://www.hexview.com/docs/20041021-1.txt
CVE-2004-0984
Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mailutils
References: http://packages.debian.org/changelogs/pool/main/m/mailutils/mailutils_0.6-2/changelog, http://packages.debian.org/changelogs/pool/main/m/mailutils/mailutils_0.6-2/changelog
CVE-2004-0361
The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large size value, then writing into that array.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: safari
References: http://marc.info/?l=bugtraq&m=107861828510106&w=2, http://www.insecure.ws/article.php?story=2004021918172533, http://www.securityfocus.com/bid/9815
CVE-2004-1375
Unknown vulnerability in System Administration Manager (SAM) in HP-UX B.11.00, B.11.11, B.11.22, and B.11.23 allows local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: hp-ux
References: http://marc.info/?l=bugtraq&m=110384155209555&w=2, http://www.ciac.org/ciac/bulletins/p-085.shtml, http://www.securityfocus.com/bid/12098
CVE-2004-0484
mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a null dereference.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected Products: internet_explorer
References: http://marc.info/?l=bugtraq&m=108490218632590&w=2, http://www.securityfocus.com/bid/10382, https://exchange.xforce.ibmcloud.com/vulnerabilities/16189
CVE-2004-0602
The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges or cause a system panic.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:13.linux.asc, http://www.securityfocus.com/bid/10643, https://exchange.xforce.ibmcloud.com/vulnerabilities/16558
CVE-2004-2423
Unknown vulnerability in the Web calendaring component of Ipswitch IMail Server before 8.13 allows remote attackers to cause a denial of service (crash) via "specific content."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: imail
References: http://secunia.com/advisories/12453, http://securitytracker.com/id?1011146, http://support.ipswitch.com/kb/IM-20040902-DM01.htm#FIXES
CVE-2004-0462
The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
References: http://www.kb.cert.org/vuls/id/546483, https://exchange.xforce.ibmcloud.com/vulnerabilities/17702, http://www.kb.cert.org/vuls/id/546483
CVE-2004-1887
Ada Image Server (ImgSvr) 0.4 allows remote attackers to view directories or download files via an HTTP request with a trailing %00 (null).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: imgsvr
References: http://marc.info/?l=bugtraq&m=108083813528255&w=2, http://secunia.com/advisories/11277, http://sourceforge.net/project/shownotes.php?release_id=230023
CVE-2004-1520
Stack-based buffer overflow in IPSwitch IMail 8.13 allows remote authenticated users to execute arbitrary code via a long IMAP DELETE command.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: imail
References: http://marc.info/?l=bugtraq&m=110037283803560&w=2, http://secunia.com/advisories/13200, http://www.securityfocus.com/bid/11675
CVE-2004-0055
The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tcpdump
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt, ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt, ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc
CVE-2004-1948
NcFTP client 3.1.6 and 3.1.7, when the username and password are included in an FTP URL that is provided on the command line, allows local users to obtain sensitive information via "ps aux," which displays the URL in the process list.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ncftp
References: http://marc.info/?l=bugtraq&m=108247943201685&w=2, http://secunia.com/advisories/11438, http://www.osvdb.org/5595
CVE-2004-2701
Cross-site scripting (XSS) vulnerability in signin.aspx for AspDotNetStorefront 3.3 allows remote attackers to inject arbitrary web script or HTML via the returnurl parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: aspdotnetstorefront
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0129.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0229.html, http://secunia.com/advisories/11839
CWE: CWE-79
CVE-2004-0764
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: thunderbird, mozilla, firefox
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://bugzilla.mozilla.org/show_bug.cgi?id=244965, http://marc.info/?l=bugtraq&m=109900315219363&w=2
CVE-2004-2627
Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: j2me
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0231.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-10/0884.html, http://secunia.com/advisories/12945
CVE-2004-0593
Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_enterprise, enforcer
References: http://marc.info/?l=bugtraq&m=109215731626998&w=2, http://www.corsaire.com/advisories/c031120-003.txt, http://www.securityfocus.com/bid/10908
CVE-2004-2597
Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's ability to find the client's IP address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: quake_ii_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html, http://secunia.com/advisories/13013, http://secur1ty.net/advisories/001
CVE-2004-2355
Cross-site scripting (XSS) vulnerability in Crafty Syntax Live Help (CSLH) before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: crafty_syntax_live_help
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0054.html, http://secunia.com/advisories/11789, http://www.craftysyntax.com/CHANGELOG.txt
CVE-2004-1751
Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or server crash) via a large packet, which generates a "Message too long" socket error that is treated as a critical error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ground_control_ii_operation_exodus
References: http://aluigi.altervista.org/adv/gc2boom-adv.txt, http://marc.info/?l=bugtraq&m=109357154602892&w=2, http://securitytracker.com/id?1011075
CVE-2004-2741
Cross-site scripting (XSS) vulnerability in the "help window" (help.php) in Horde Application Framework 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the (1) module, (2) topic, or (3) module parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: application_framework
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://cvs.horde.org/diff.php/horde/templates/help/index.inc?r1=1.9.2.4&r2=1.9.2.5&ty=u, http://lists.horde.org/archives/announce/2004/000107.html, http://secunia.com/advisories/12992
CWE: CWE-79
CVE-2004-1777
A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: skype
Related CWEs: CWE-20
Related CAPECs: CAPEC-31, CAPEC-53, CAPEC-261
MITRE ATT&CK Techniques: T1574.006, T1553.002, T1574.007
MITRE ATT&CK Tactics: T1562, T1574, T1553
References: http://lists.virus.org/bugtraq-0406/msg00221.html, http://securitytracker.com/id?1010490, http://www.osvdb.org/11860
CWE: CWE-20
MITRE ATT&CK techniques: T1574.006, T1553.002, T1574.007, T1539, T1036.001, T1562.003, T1027
MITRE ATT&CK tactics: T1562, T1574, T1553, T1036
CVE-2004-0282
Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: crob_ftp_server
References: http://marc.info/?l=bugtraq&m=107665920909374&w=2, http://secunia.com/advisories/10882, http://www.osvdb.org/6621
CVE-2004-0544
Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://secunia.com/advisories/11158/, http://www-1.ibm.com/services/continuity/recover1.nsf/mss/MSS-OAR-E01-2004.0544.2, http://www-1.ibm.com/support/docview.wss?uid=isg1IY55681
CVE-2004-0130
login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpgedview
References: http://securitytracker.com/alerts/2004/Jan/1008844.html, http://www.netvigilance.com/advisory0001, http://www.osvdb.org/6886
CVE-2004-0293
Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: shopcartcgi
References: http://marc.info/?l=bugtraq&m=107703602707450&w=2, http://www.securityfocus.com/bid/9670, http://www.zone-h.org/en/advisories/read/id=3962/
CVE-2004-0762
Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: thunderbird, mozilla, firefox
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt, http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html, http://bugzilla.mozilla.org/show_bug.cgi?id=162020
CVE-2004-0987
Buffer overflow in the process_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: yard_radius
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278384, http://www.debian.org/security/2004/dsa-598, http://www.securityfocus.com/bid/11753
CVE-2004-1028
Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: aix
References: http://www-1.ibm.com/support/search.wss?rs=0&q=IY64354&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY64355&apar=only, http://www-1.ibm.com/support/search.wss?rs=0&q=IY64356&apar=only
CVE-2004-0708
MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: moinmoin
References: http://secunia.com/advisories/11807, http://sourceforge.net/tracker/index.php?func=detail&aid=948103&group_id=8482&atid=108482, http://www.gentoo.org/security/en/glsa/glsa-200407-09.xml
CVE-2004-2387
Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sercd, sredird
References: http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd, http://secunia.com/advisories/12351, http://securitytracker.com/id?1011038
CVE-2004-2547
NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: webmail, surgemail
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0056.html, http://secunia.com/advisories/11772, http://www.exploitlabs.com/files/advisories/EXPL-A-2004-002-surgmail.txt
CVE-2004-0497
Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: enterprise_linux, suse_linux, mandrake_multi_network_firewall, secure_linux, mandrake_linux
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000852, http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:066, http://www.novell.com/linux/security/advisories/2004_20_kernel.html