DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-1957
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the (1) lid and query parameters to the Downloads module, (2) query parameter to the Web_links module, or (3) hlpfile parameter to openwindow.php.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: postnuke
References: http://marc.info/?l=bugtraq&m=108258902000472&w=2, http://www.securityfocus.com/bid/10191, http://www.waraxe.us/index.php?modname=sa&id=22
CVE-2004-0211
The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_2003_server
References: http://www.kb.cert.org/vuls/id/119262, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032, https://exchange.xforce.ibmcloud.com/vulnerabilities/16582
CVE-2004-1382
The glibcbug script in glibc 2.3.4 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CVE-2004-0968.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: glibc
References: http://marc.info/?l=bugtraq&m=109899903129801&w=2, http://www.debian.org/security/2005/dsa-636, http://www.mandriva.com/security/advisories?name=MDKSA-2004:159
CVE-2004-1157
Opera 7.x up to 7.54, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: opera_browser
Related CWEs: CWE-74
Related CAPECs: CAPEC-53, CAPEC-51, CAPEC-9
MITRE ATT&CK Techniques: T1574.006, T1574.007, T1027
MITRE ATT&CK Tactics: T1562, T1574
References: http://secunia.com/advisories/13253/, http://secunia.com/multiple_browsers_window_injection_vulnerability_test/, http://secunia.com/secunia_research/2004-13/advisory/
CWE: CWE-74
MITRE ATT&CK techniques: T1574.006, T1574.007, T1027, T1562.003
MITRE ATT&CK tactics: T1562, T1574
CVE-2004-1941
Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service via a username that does not exist.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: netfile_ftp_web_server
References: http://marc.info/?l=bugtraq&m=108239249613861&w=2, http://secunia.com/advisories/11428, http://securitytracker.com/id?1009868
CVE-2004-0666
Off-by-one error in the POP3_readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service (application crash) via an e-mail message with a certain line length, which leads to a buffer overflow.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: popclient
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/023147.html, http://marc.info/?l=bugtraq&m=108852915403293&w=2, http://www.grok.org.uk/advisories/popclient.html
CVE-2004-2451
Roger Wilco 1.4.1.6 and earlier, or Roger Wilco Base Station 0.30a or earlier, allows remote attackers to send audio to arbitrary channels, aka the "Voices from the deep" bug.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: rw_base_station, roger_wilco_graphical_server, roger_wilco_dedicated_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html, http://secunia.com/advisories/11270, http://www.securityfocus.com/bid/10025
CVE-2004-2552
Buffer overflow in XBoard 4.2.7 and earlier might allow local users to execute arbitrary code via a long -icshost command line argument. NOTE: since the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries.  Therefore this may not be a vulnerability.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: xboard
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-03/0030.html, http://secunia.com/advisories/11016, http://www.osvdb.org/4123
CVE-2004-1620
CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: serendipity
References: http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/comment.php?rev=1.49&view=markup, http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/exit.php?rev=1.10&view=markup, http://cvs.sourceforge.net/viewcvs.py/php-blog/serendipity/index.php?rev=1.52&view=markup
CVE-2004-2061
RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url parameter to a (1) http://, (2) ftp://, or (3) file:// URL.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: risearch_pro, risearch
Related CWEs: CWE-918
Related CAPECs: CAPEC-664
References: http://marc.info/?l=bugtraq&m=109095196526490&w=2, http://secunia.com/advisories/12173, http://securitytracker.com/id?1010788
CWE: CWE-918
CVE-2004-0919
The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:15.syscons.asc, http://secunia.com/advisories/12722, http://www.kb.cert.org/vuls/id/969078
CVE-2004-1583
Directory traversal vulnerability in the FTP server in TriDComm 1.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in FTP commands such as (1) DIR, (2) GET, or (3) PUT.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: tridcomm
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027195.html, http://marc.info/?l=bugtraq&m=109709637732276&w=2, http://secunia.com/advisories/12755
CVE-2004-2092
eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the application's registry and tmp directories, which allows local users to delete, modify, or examine sensitive information.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: inoculateit
References: http://marc.info/?l=bugtraq&m=107635584431518&w=2, http://secunia.com/advisories/10833, http://www.excluded.org/advisories/advisory10.txt
CVE-2004-0057
The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tcpdump
References: ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2004-008.0.txt, ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2004.9/SCOSA-2004.9.txt, ftp://patches.sgi.com/support/free/security/advisories/20040103-01-U.asc
CVE-2004-1976
SMC Barricade broadband router 7008ABR and 7004VBR enable remote administration by default, which allows remote attackers to gain access by connecting to port 1900.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: smc7004vbr
References: http://archives.neohapsis.com/archives/bugtraq/2004-06/0101.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020580.html, http://marc.info/?l=bugtraq&m=108317929931816&w=2
CVE-2004-1489
Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Affected Products: opera_browser
Related CWEs: CWE-668
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/029044.html, http://www.gentoo.org/security/en/glsa/glsa-200502-17.xml, http://www.opera.com/linux/changelogs/754u1/
CWE: CWE-668
CVE-2004-0921
AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mac_os_x_server, quicktime, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html, http://www.securityfocus.com/bid/11322, http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
CVE-2004-1039
The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: unixware, openserver
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.1/SCOSA-2005.1.txt, http://secunia.com/advisories/13805, http://www.securityfocus.com/archive/1/386814
CVE-2004-0894
LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_xp, windows_2003_server
References: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044, https://exchange.xforce.ibmcloud.com/vulnerabilities/18340, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1888
CVE-2004-2418
Buffer overflow in SlimFTPd 3.15 and earlier allows local users to execute arbitrary code via a long command, such as (1) CWD, (2) STOR, (3) MKD, and (4) STAT.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: slimftpd
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0293.html, http://secunia.com/advisories/13161, http://securitytracker.com/id?1012167
CVE-2004-1735
Cross-site scripting (XSS) vulnerability in the create list option in Sympa 4.1.x and earlier allows remote authenticated users to inject arbitrary web script or HTML via the description field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: sympa
References: http://marc.info/?l=bugtraq&m=109312475207604&w=2, http://secunia.com/advisories/12339, http://www.securityfocus.com/bid/10992
CVE-2004-2406
Unknown "overflow" in the phpgw_config table for phpGroupWare before 0.9.14.002 has unknown attack vectors and impact.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: phpgroupware
References: http://sourceforge.net/project/shownotes.php?release_id=153116, http://www.osvdb.org/7620, http://sourceforge.net/project/shownotes.php?release_id=153116
CVE-2004-2211
Cross-site scripting (XSS) vulnerability in AliveSites Forums 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) forum_id, (2) method, or (3) forum_title parameters to post.asp, (4) the forum_title parameter to forum.asp, or (5) the id parameter to post.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: alivesites_forum
References: http://secunia.com/advisories/12844, http://www.maxpatrol.com/advdetails.asp?id=5, http://www.maxpatrol.com/mp_advisory.asp
CVE-2004-1503
Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jre
References: http://marc.info/?l=bugtraq&m=109994063331773&w=2, http://secunia.com/advisories/13142, http://www.securityfocus.com/bid/11619
CVE-2004-0748
mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
Related CWEs: CWE-835
References: http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml, http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096, http://www.novell.com/linux/security/advisories/2004_30_apache2.html
CWE: CWE-835
CVE-2004-0311
American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, which allows remote attackers to gain unauthorized access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ap9606
References: http://marc.info/?l=bugtraq&m=107703696631367&w=2, http://marc.info/?l=bugtraq&m=107721020803565&w=2, http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=3131&p_created=1077139129
CVE-2004-2466
chat.ghp in Easy Chat Server 1.2 allows remote attackers to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow.  NOTE: it was later reported that 2.2 is also affected.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: easy_chat_server
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.html, http://packetstormsecurity.com/files/167892/Easy-Chat-Server-3.1-Buffer-Overflow.html
CWE: CWE-119
CVE-2004-2611
The Change Permissions function in the Sophster suite before 0.9.6 28 May 2004 (aka 0.9.6-r5), possibly including Sophster, FreeSophster, and FreeSophsterPAM, removes the (1) setuid, (2) setgid, and (3) sticky bits when changing a file, which might allow attackers to gain privileges or conduct other unauthorized activities.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sophster
References: http://securitytracker.com/id?1010431, http://www.osvdb.org/6657, http://www.schaefer.dhcp.biz/CHANGELOG.txt
CVE-2004-1828
Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: vcard
References: http://marc.info/?l=bugtraq&m=107957312531199&w=2, http://www.securityfocus.com/bid/9910, https://exchange.xforce.ibmcloud.com/vulnerabilities/15522
CVE-2004-2738
Cross-site scripting (XSS) vulnerability in check_user_id.php in ZeroBoard 4.1pl4 and earlier allows remote attackers to inject arbitrary web script or HTML via the user_id parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: zeroboard
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030224.html, http://marc.info/?l=bugtraq&m=110391024404947&w=2, http://secunia.com/advisories/13649
CWE: CWE-79
CVE-2004-0638
Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument.
CVSS v2.0 Score: 8.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Affected Products: oracle8i, oracle9i
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0178.html, http://www.idefense.com/application/poi/display?id=135&type=vulnerabilities&flashstatus=false, http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf
CWE: CWE-119
CVE-2004-1268
lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to corrupt the file by filling the associated file system and triggering the write errors.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: fedora_core, cups
References: http://tigger.uic.edu/~jlongs2/holes/cups2.txt, http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
CVE-2004-1557
MyWebServer 1.0.3 allows remote attackers to bypass authentication, modify configuration, and read arbitrary files via a direct HTTP request to (1) /admin or (2) ServerProperties.html.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mywebserver
References: http://marc.info/?l=bugtraq&m=109630333230707&w=2, http://securitytracker.com/id?1011461, http://www.securityfocus.com/bid/11254
CVE-2004-2465
Cross-site scripting (XSS) vulnerability in chat.ghp in Easy Chat Server 1.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: easy_chat_server
References: http://secunia.com/advisories/12006, https://exchange.xforce.ibmcloud.com/vulnerabilities/16634, http://secunia.com/advisories/12006
CVE-2004-2733
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitrary IP addresses via pop_up_ip_blocking.asp or (2) modify topics via pop_up_topic_admin.asp.
CVSS v2.0 Score: 5.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:P
Affected Products: web_wiz_forums
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-04/1119.html, http://secunia.com/advisories/11525, http://securitytracker.com/id?1010012
CWE: CWE-264
CVE-2004-0651
Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jre, sdk
References: http://marc.info/?l=bugtraq&m=108559041910233&w=2, http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57555, http://www.kb.cert.org/vuls/id/118558
CVE-2004-2110
SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phorum
References: http://marc.info/?l=bugtraq&m=107487971405960&w=2, http://phorum.org/, http://marc.info/?l=bugtraq&m=107487971405960&w=2
CVE-2004-1141
The HTTP dissector in Ethereal 0.10.1 through 0.10.7 allows remote attackers to cause a denial of service (application crash) via a certain packet that causes the dissector to access previously-freed memory.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916, http://secunia.com/advisories/13468/, http://www.ciac.org/ciac/bulletins/p-061.shtml
CVE-2004-0434
k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.
CVSS v3.1 Score: 9.8 (CRITICAL)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: heimdal, debian_linux
Related CWEs: CWE-131
Related CAPECs: CAPEC-100, CAPEC-47
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:09.kadmind.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020998.html, http://marc.info/?l=bugtraq&m=108386148126457&w=2
CWE: CWE-131
CVE-2004-0328
Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gn-b46b
References: http://marc.info/?l=bugtraq&m=107766719227942&w=2, http://www.securityfocus.com/bid/9740, https://exchange.xforce.ibmcloud.com/vulnerabilities/15313
CVE-2004-2540
readObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0 through 1.4.2_05 allows remote attackers to cause a denial of service (JVM unresponsive) via crafted serialized data.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jre, jdk
References: http://archives.neohapsis.com/archives/bugtraq/2005-04/0113.html, http://secunia.com/advisories/13271/, http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-57707-1
CVE-2004-1217
Hosting Controller 6.1 Hotfix 1.4, and possibly other versions, allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter to (1) Statsbrowse.asp or (2) Generalbrowse.asp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: hosting_controller
References: http://marc.info/?l=bugtraq&m=110237762807764&w=2, http://www.securityfocus.com/bid/11822, https://exchange.xforce.ibmcloud.com/vulnerabilities/18363
CVE-2004-1471
Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.
CVSS v2.0 Score: 7.1 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:S/C:C/I:C/A:C
Affected Products: propack, linux, openbsd, cvs, freebsd
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:14.cvs.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2004-June/022441.html, http://security.e-matters.de/advisories/092004.html
CVE-2004-2616
The file server in ActivePost Standard 3.1 and earlier allows remote authenticated users to obtain sensitive information by uploading a file, which reveals the path in a success message.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Affected Products: activepost_standard
References: http://aluigi.altervista.org/adv/actp-adv.txt, http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0852.html, http://marc.info/?l=bugtraq&amp%3Bm=109597139011373&amp%3Bw=2
CVE-2004-2067
SQL injection vulnerability in controlpanel.php in Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL and bypass authentication via the (1) user, (2) password, or (3) crypted_password parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jaws
References: http://marc.info/?l=bugtraq&m=109116345930380&w=2, http://securitytracker.com/id?1010815, http://www.jaws.com.mx/index.php?gadget=blog&action=single_view&id=10
CVE-2004-1492
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service (game exit) via a data packet that contains a large size specifier, which causes a large memory allocation to fail.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: master_of_orion_iii
References: http://marc.info/?l=bugtraq&m=109889705116038&w=2, http://secunia.com/advisories/13008, http://www.securityfocus.com/bid/11550
CVE-2004-0374
Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: interchange
References: http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW, http://secunia.com/advisories/11234, http://www.debian.org/security/2004/dsa-471
CVE-2004-0202
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: directx, windows_2000, windows_98se, windows_98, windows_2003_server
References: http://secunia.com/advisories/11802, http://www.osvdb.org/6742, http://www.securityfocus.com/bid/10487
CVE-2004-2450
The client and server for Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier report sensitive information such as IDs and source IP addresses, which allows remote attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: roger_wilco_mark, roger_wilco, roger_wilco_graphical_server, roger_wilco_dedicated_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html, http://secunia.com/advisories/11270, http://www.securityfocus.com/bid/10024
CVE-2004-0617
Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: arbitroweb
References: http://marc.info/?l=bugtraq&m=108794392303244&w=2, http://www.securityfocus.com/bid/10592, https://exchange.xforce.ibmcloud.com/vulnerabilities/16481
CVE-2004-1388
Format string vulnerability in the gpsd_report function for BerliOS GPD daemon (gpsd, formerly pygps) 1.9.0 through 2.7 allows remote attackers to execute arbitrary code via certain GPS requests containing format string specifiers that are not properly handled in syslog calls.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gps_daemon
References: http://lists.berlios.de/pipermail/gpsd-announce/2005-January/000018.html, http://marc.info/?l=bugtraq&m=110677341711505&w=2, http://www.digitalmunition.com/DMA%5B2005-0125a%5D.txt
CVE-2004-1921
X-Micro WLAN 11b Broadband Router 1.6.0.1 has a hardcoded "1502" username and password, which could allow remote attackers to gain access.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: wlan_11b_broadband_router_firmware
References: http://marc.info/?l=bugtraq&m=108213608111111&w=2, http://marc.info/?l=bugtraq&m=108223222519855&w=2, http://secunia.com/advisories/11342
CVE-2004-1406
SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via the (1) st or (2) keywords parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ikonboard
References: http://marc.info/?l=bugtraq&m=110321654705580&w=2, http://secunia.com/advisories/13513, http://www.securityfocus.com/bid/11982
CVE-2004-1035
Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service (server crash) and possibly leak sensitive information via certain literal values that are not properly handled when using the IMAP_Line_Read function.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P
Affected Products: imap_proxy
References: http://marc.info/?l=bugtraq&m=109995749510773&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17999, http://marc.info/?l=bugtraq&m=109995749510773&w=2
CVE-2004-1844
Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the err parameter to error.asp or (2) register.asp.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: member_management_system
References: http://marc.info/?l=bugtraq&m=107999697625786&w=2, http://secunia.com/advisories/11179, http://securitytracker.com/id?1009508
CVE-2004-1213
Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the entry parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: advanced_guestbook
References: http://marc.info/?l=bugtraq&m=110206527624612&w=2, http://marc.info/?l=bugtraq&m=110238530129498&w=2, http://www.securityfocus.com/bid/11798
CVE-2004-0564
Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files.  NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root."  Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: pppoe, debian_linux
References: http://marc.info/?l=bugtraq&m=110247119200510&w=2, http://marc.info/?l=bugtraq&m=110253341209450&w=2, http://www.debian.org/security/2004/dsa-557
CVE-2004-1102
MailPost 5.1.1sv, and possibly earlier versions, displays a different error message depending on whether the requested file exists or not, which allows remote attackers to gain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mailpost
References: http://www.kb.cert.org/vuls/id/306086, http://www.procheckup.com/security_info/vuln_pr0408.html, http://www.securityfocus.com/bid/11599
CVE-2004-1372
Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: db2_universal_database
References: http://marc.info/?l=bugtraq&m=110382462924162&w=2, http://marc.info/?l=bugtraq&m=110382730431065&w=2, http://www.ngssoftware.com/advisories/db223122004K.txt
CVE-2004-2074
Format string vulnerability in Dream FTP 1.02 allows local users to cause a denial of service (crash) via format string specifiers in the (1) PASS or (2) RETR commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: dream_ftp_server
References: http://securitytracker.com/id?1009295, http://www.securityfocus.com/bid/9800, https://exchange.xforce.ibmcloud.com/vulnerabilities/15380
CVE-2004-2357
The embedded MySQL 4.0 server for Proofpoint Protection Server does not require a password for the root user of MySQL, which allows remote attackers to read or modify the backend database.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: proofpoint_protection_server
References: http://marc.info/?l=full-disclosure&m=107745676915297&w=2, http://marc.info/?l=full-disclosure&m=107752568009182&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/15280
CVE-2004-2491
A race condition in Opera web browser 7.53 Build 3850 causes Opera to fill in the address bar before the page has been loaded, which allows remote attackers to spoof the URL in the address bar via the window.open and location.replace HTML parameters, which facilitates phishing attacks.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: opera_browser
Related CWEs: CWE-362
Related CAPECs: CAPEC-29, CAPEC-26
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1056.html, http://secunia.com/advisories/12162, http://www.opera.com/windows/changelogs/754/
CWE: CWE-362
CVE-2004-0733
Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are directly provided to the OutputDebugString function call.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ollydbg
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0711.html, http://marc.info/?l=bugtraq&m=109007978822810&w=2, http://www.securityfocus.com/bid/10742
CVE-2004-2059
Multiple cross-site scripting vulnerabilities in ASPRunner 2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) SearchFor parameter in [TABLE-NAME]_search.asp, (2) SQL parameter in [TABLE-NAME]_edit.asp, (3) SearchFor parameter in [TABLE]_list.asp, or (4) SQL parameter in export.asp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: asprunner
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0011.html, http://ferruh.mavituna.com/article/?574, http://marc.info/?l=bugtraq&m=109086977330418&w=2
CVE-2004-0620
Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: vbulletin
References: http://marc.info/?l=bugtraq&m=108809720026642&w=2, http://www.securityfocus.com/bid/10602, https://exchange.xforce.ibmcloud.com/vulnerabilities/16502
CVE-2004-0489
Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option.
CVSS v2.0 Score: 7.6 (HIGH)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Affected Products: mac_os_x
Related CWEs: CWE-88
Related CAPECs: CAPEC-137, CAPEC-88, CAPEC-174
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021871.html, http://www.insecure.ws/article.php?story=200405222251133, https://exchange.xforce.ibmcloud.com/vulnerabilities/16242
CWE: CWE-88
CVE-2004-1300
Buffer overflow in the open_aiff_file function in demux_aiff.c for xine-lib (libxine) 1-rc7 allows remote attackers to execute arbitrary code via a crafted AIFF file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: xine-lib
References: http://tigger.uic.edu/~jlongs2/holes/xine-lib.txt, http://www.mandriva.com/security/advisories?name=MDKSA-2005:011, https://exchange.xforce.ibmcloud.com/vulnerabilities/18611
CVE-2004-0738
Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL via the (1) min or (2) categ parameters.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=109026609504767&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16737, http://marc.info/?l=bugtraq&m=109026609504767&w=2
CVE-2004-0680
Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: model_5560_x3_ethernet_adsl_modem
References: http://marc.info/?l=bugtraq&m=108915255520924&w=2, http://www.securityfocus.com/bid/10669, https://exchange.xforce.ibmcloud.com/vulnerabilities/16639
CVE-2004-0784
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gaim
References: http://gaim.sourceforge.net/security/?id=1, http://www.fedoranews.org/updates/FEDORA-2004-278.shtml, http://www.fedoranews.org/updates/FEDORA-2004-279.shtml
CVE-2004-1857
Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: web_jetadmin
References: http://marc.info/?l=bugtraq&m=108016019623003&w=2, http://www.securityfocus.com/advisories/6492, http://www.securityfocus.com/bid/9972
CVE-2004-1143
The password generation in mailman before 2.1.5 generates only 5 million unique passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailman
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286796, http://marc.info/?l=bugtraq&m=110549296126351&w=2, http://secunia.com/advisories/13603/
CVE-2004-1505
Directory traversal vulnerability in index.php in Just Another Flat file (JAF) CMS 3.0RC allows remote attackers to read arbitrary files and possibly execute PHP code via a .. (dot dot) in the show parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: jaf_cms
References: http://echo.or.id/adv/adv08-y3dips-2004.txt, http://marc.info/?l=bugtraq&m=110004150430309&w=2, http://secunia.com/advisories/13104
CVE-2004-2659
Opera offers an Open button to verify that a user wishes to execute a downloaded file, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking Open via a request for a different mouse or keyboard action very shortly before the Open dialog appears.  NOTE: this is a different issue than CVE-2005-2407.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:N
Affected Products: mozilla, opera_browser
Related CWEs: CWE-362
Related CAPECs: CAPEC-29, CAPEC-26
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html, http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/, http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0264.html
CWE: CWE-362
CVE-2004-1482
The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: bnc
References: http://secunia.com/advisories/12770/, http://www.gentoo.org/security/en/glsa/glsa-200410-13.xml, http://www.gotbnc.com/changes.html#2.8.9
CVE-2004-2623
Unknown vulnerability in Rippy the Aggregator before 0.10, when register_globals is enabled, has unknown attack vectors and impact, possibly related to the "user-controlled filter."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: rippy_the_aggregator
References: http://ansuz.sooke.bc.ca/rippy/ChangeLog, http://freshmeat.net/projects/rippy/?branch_id=30091&release_id=173997, http://secunia.com/advisories/12769
CVE-2004-0614
osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:P
Affected Products: osticket_sts
References: http://marc.info/?l=bugtraq&m=108786779500957&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16477, http://marc.info/?l=bugtraq&m=108786779500957&w=2
CVE-2004-0873
Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ichat, ichat_av
References: http://lists.apple.com/archives/security-announce/2004/Sep/msg00001.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/17420, http://lists.apple.com/archives/security-announce/2004/Sep/msg00001.html
CVE-2004-1603
cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.
CVSS v3.1 Score: 5.5 (MEDIUM)
CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: cpanel
Related CWEs: CWE-59
Related CAPECs: CAPEC-132, CAPEC-76, CAPEC-17
MITRE ATT&CK Techniques: T1547.009, T1027.006, T1564.009
MITRE ATT&CK Tactics: T1574, T1547, T1564
References: http://marc.info/?l=bugtraq&m=109811572123753&w=2, http://marc.info/?l=bugtraq&m=109811654104208&w=2, http://secunia.com/advisories/12865
CWE: CWE-59
MITRE ATT&CK techniques: T1547.009, T1027.006, T1564.009, T1574.010, T1574.005, T1027.009
MITRE ATT&CK tactics: T1574, T1547, T1564, T1027
CVE-2004-1425
Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. (dot dot) in the file parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: moodle
References: http://marc.info/?l=bugtraq&m=110425409614735&w=2, http://marc.info/?l=bugtraq&m=110444531816566&w=2, http://www.securityfocus.com/bid/12120
CVE-2004-1798
RealOne player 6.0.11.868 allows remote attackers to execute arbitrary script in the "My Computer" zone via a Synchronized Multimedia Integration Language (SMIL) presentation with a "file:javascript:" URL, which is executed in the security context of the previously loaded URL, a different vulnerability than CVE-2003-0726.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: realplayer, realone_player, realone_enterprise_desktop
References: http://secunia.com/advisories/9584, http://securitytracker.com/id?1008647, http://www.osvdb.org/3826
CVE-2004-1124
Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unixware, openserver
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.22/SCOSA-2005.22.txt, ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.2/SCOSA-2005.2.txt, http://secunia.com/advisories/13915
CVE-2004-1309
Heap-based buffer overflow in the demux_open_bmp function in demux_bmp.c for Unix MPlayer 1.0pre5 allows remote attackers to execute arbitrary code via a bitmap (BMP) file containing a large biClrUsed field.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unix_mplayer
References: http://www.idefense.com/application/poi/display?id=168, http://www.mandriva.com/security/advisories?name=MDKSA-2004:157, http://www1.mplayerhq.hu/MPlayer/releases/ChangeLog
CVE-2004-2762
The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Affected Products: mvs, tivoli_storage_manager
References: http://secunia.com/advisories/34498, http://securitytracker.com/id?1021946, http://www-01.ibm.com/support/docview.wss?uid=swg21246076
CVE-2004-1739
Bird Chat 1.61 allows remote attackers to cause a denial of service (crash) via invalid users.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: internet_chat_server
References: http://marc.info/?l=bugtraq&m=109327938924287&w=2, http://secunia.com/advisories/12365, http://www.autistici.org/fdonato/advisory/BirdChat1.61-adv.txt
CVE-2004-1067
Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ubuntu_linux, cyrus_imap_server, fedora_core
References: http://asg.web.cmu.edu/cyrus/download/imapd/changes.html, http://www.securityfocus.com/bid/11738, https://exchange.xforce.ibmcloud.com/vulnerabilities/18333
CVE-2004-0447
Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.  NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477.  This is the proper candidate to use for the Linux local DoS.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel
References: ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc, http://archives.neohapsis.com/archives/linux/owl/2004-q2/0038.html, http://secunia.com/advisories/20162
CVE-2004-0052
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators incorrectly, within MIME headers, fields, parameters, or values, which may be interpreted differently by mail clients.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: ripmime, mailsweeper, internet_gatekeeper
References: http://marc.info/?l=bugtraq&m=109517669115891&w=2, http://www.uniras.gov.uk/vuls/2004/380375/mime.htm, https://exchange.xforce.ibmcloud.com/vulnerabilities/17334
CVE-2004-0796
SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: spamassassin
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=129337, http://marc.info/?l=spamassassin-announce&m=109168121628767&w=2, http://security.gentoo.org/glsa/glsa-200408-06.xml
CVE-2004-1810
The Javascript engine in Opera 7.23 allows remote attackers to cause a denial of service (crash) by creating a new Array object with a large size value, then writing into that array.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: opera_browser
References: http://marc.info/?l=bugtraq&m=107936810909082&w=2, http://www.securityfocus.com/bid/9869, https://exchange.xforce.ibmcloud.com/vulnerabilities/15413
CVE-2004-0471
BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp, http://secunia.com/advisories/11594, http://securitytracker.com/id?1010129
CVE-2004-2348
Sybari AntiGen for Domino 7.0 Build 722 SR2 allows remote attackers to cause a denial of service (hang) via an encrypted ZIP file with the "include full path info" option set, as used by certain variants of the Beagle/Bagle worm.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: antigen
References: http://secunia.com/advisories/11120/, http://securitytracker.com/id?1009437, http://www.securityfocus.com/bid/9880