DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-2700
Unrestricted file upload vulnerability in AspDotNetStorefront 3.3 allows remote authenticated administrators to upload arbitrary files with executable extensions via admin/images.aspx.
CVSS v2.0 Score: 9.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Affected Products: aspdotnetstorefront
Related CWEs: CWE-264
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0230.html, http://secunia.com/advisories/11839, http://www.osvdb.org/6959
CWE: CWE-264
CVE-2004-1599
Cross-site scripting (XSS) vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to execute arbitrary web script or HTML via the (1) query or (2) nick parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: coolphpweb_portal
References: http://marc.info/?l=bugtraq&m=109810941419669&w=2, http://secunia.com/advisories/12850, http://securitytracker.com/id?1011748
CVE-2004-0304
SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: webstores_2000
References: http://marc.info/?l=bugtraq&m=107712159425226&w=2, http://www.s-quadra.com/advisories/Adv-20040218.txt, http://www.securityfocus.com/bid/7766
CVE-2004-0491
The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: enterprise_linux
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U, http://marc.info/?l=linux-kernel&m=108087017610947&w=2, http://secunia.com/advisories/19607
CVE-2004-1412
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.x allows remote attackers to inject arbitrary web script or HTML via the searchm parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: esupport
References: http://marc.info/?l=bugtraq&m=110352428607171&w=2, http://www.gulftech.org/?node=research&article_id=00056-12182004, http://www.securityfocus.com/bid/12037
CVE-2004-1020
The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magic_quotes_gpc mechanism.  NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute.  This candidate may change significantly in the future as a result of further discussion.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: php
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000915, http://www.gentoo.org/security/en/glsa/glsa-200412-14.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2004:151
CVE-2004-0642
Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: debian_linux, enterprise_linux_workstation, enterprise_linux_server, enterprise_linux_desktop, kerberos_5
Related CWEs: CWE-415
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000860, http://marc.info/?l=bugtraq&m=109508872524753&w=2, http://rhn.redhat.com/errata/RHSA-2004-350.html
CWE: CWE-415
CVE-2004-0288
Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mnogosearch
References: http://marc.info/?l=bugtraq&m=107695139930726&w=2, http://www.securityfocus.com/bid/9667, https://exchange.xforce.ibmcloud.com/vulnerabilities/15209
CVE-2004-0339
Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: phpbb
References: http://marc.info/?l=bugtraq&m=107799508130700&w=2, http://www.securityfocus.com/bid/9765, https://exchange.xforce.ibmcloud.com/vulnerabilities/15348
CVE-2004-2131
Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: informix_dynamic_server, informix_extended_parallel_server
References: http://marc.info/?l=bugtraq&m=107539878804074&w=2, http://secunia.com/advisories/10737/, http://www-1.ibm.com/support/docview.wss?uid=swg21153336
CVE-2004-0624
PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: artmedic_links
References: http://marc.info/?l=bugtraq&m=108820257812904&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16518, http://marc.info/?l=bugtraq&m=108820257812904&w=2
CVE-2004-1229
Cross-site scripting vulnerability in the parser for Gadu-Gadu allows remote attackers to inject arbitrary web script or HTML via (1) http:// or (2) news:// URLs, a different vulnerability than CVE-2004-1410.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gadu-gadu_instant_messenger
References: http://marc.info/?l=bugtraq&m=110295777306493&w=2, http://secunia.com/advisories/13450, http://www.man.poznan.pl/~security/gg-adv.txt
CVE-2004-0015
vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vbox3
References: http://www.debian.org/security/2004/dsa-418, http://www.securityfocus.com/bid/9381, https://exchange.xforce.ibmcloud.com/vulnerabilities/14170
CVE-2004-0887
SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: linux_kernel, suse_linux
References: http://secunia.com/advisories/19369, http://www.debian.org/security/2006/dsa-1018, http://www.novell.com/linux/security/advisories/2004_37_kernel.html
CVE-2004-2363
Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting (XSS) attacks via hex-encoded tags, which bypass the check for literal "<", ">", "(", and ")" characters, as demonstrated using the limit parameter to forums.php and a variety of other vectors.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpx
References: http://www.phpx.org/project.php?action=view&project_id=1, http://www.securityfocus.com/archive/1/362230, http://www.securityfocus.com/bid/10283
CVE-2004-1418
Cross-site scripting (XSS) vulnerability in WPKontakt 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an e-mail address, which is not quoted when a parsing error is generated.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: wpkontakt
References: http://marc.info/?l=bugtraq&m=110384387332443&w=2, http://www.securityfocus.com/bid/12097, https://exchange.xforce.ibmcloud.com/vulnerabilities/18685
CVE-2004-1771
Scalable OGo (SOGo) 1.0 allows remote authenticated users to bypass intended permissions and view private appointments of other users.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: scalable_ogo
References: http://bugzilla.opengroupware.org/bugzilla/show_bug.cgi?id=1060, http://securitytracker.com/id?1013553, http://www.osvdb.org/14675
CVE-2004-1715
Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 allows remote attackers or local users to read arbitrary files via "..\\", "..\", and similar dot dot sequences in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mimesweeper_for_web
References: http://marc.info/?l=bugtraq&m=109224211512029&w=2, http://marc.info/?l=bugtraq&m=109225567212978&w=2, http://packetstormsecurity.nl/0408-exploits/clearswift.txt
CVE-2004-0711
The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_56.00.jsp, http://www.kb.cert.org/vuls/id/184558, http://www.securityfocus.com/bid/10184
CVE-2004-0062
Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: fishcart
References: http://marc.info/?l=bugtraq&m=107411850203994&w=2, http://www.securitytracker.com/id?1008731, http://marc.info/?l=bugtraq&m=107411850203994&w=2
CVE-2004-1697
The "Forgot your Password" link in Computer Associates (CA) Unicenter Management Portal 2.0 and 3.1 displays different error messages for users that exist and users that do not exist, which could allow remote attackers to guess valid usernames.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: unicenter_management
References: http://marc.info/?l=bugtraq&m=109579952809320&w=2, http://secunia.com/advisories/12620, http://www.securityfocus.com/bid/11229
CVE-2004-1297
Buffer overflow in the process_font_table function in convert.c for unrtf 0.19.3 allows remote attackers to execute arbitrary code via a crafted RTF file.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: unrtf
References: http://tigger.uic.edu/~jlongs2/holes/unrtf.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18566, http://tigger.uic.edu/~jlongs2/holes/unrtf.txt
CVE-2004-1956
PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blocks directory, (2) pnadodb directory, (3) NS-NewUser module, (4) NS-Your_Account, (5) NS-LostPassword module, or (6) NS-User module which reveals the path to the web server in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: postnuke
References: http://marc.info/?l=bugtraq&m=108258902000472&w=2, http://www.securityfocus.com/bid/10191, http://www.waraxe.us/index.php?modname=sa&id=22
CVE-2004-1685
SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM pages.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: smc7008abr, smc7004vwbr
References: http://marc.info/?l=bugtraq&m=109526094614160&w=2, http://secunia.com/advisories/12601, http://www.osvdb.org/10088
CVE-2004-0888
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, pdftohtml, debian_linux, suse_linux, kde
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886, http://marc.info/?l=bugtraq&m=109880927526773&w=2, http://marc.info/?l=bugtraq&m=110815379627883&w=2
CVE-2004-2523
Format string vulnerability in the msg command (cat_message function in msg.c) in OpenFTPD 0.30.2 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in the message argument.
CVSS v2.0 Score: 6.5 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Affected Products: openftpd_ftp_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-07/0350.html, http://archives.neohapsis.com/archives/bugtraq/2004-08/0017.html, http://secunia.com/advisories/12174
CVE-2004-1900
Format string vulnerability in the logging function in IGI 2 Covert Strike server 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in RCON commands.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: i.g.i-2_covert_strike
References: http://aluigi.altervista.org/adv/igi2fs-adv.txt, http://marc.info/?l=bugtraq&m=108120385811815&w=2, http://secunia.com/advisories/11299
CVE-2004-1082
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: webproxy, http_server, modular_messaging_message_storage_server, openbsd, communication_manager
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://www.ciac.org/ciac/bulletins/p-049.shtml, http://www.securityfocus.com/bid/9571
CVE-2004-1196
Cross-site scripting (XSS) vulnerability in inmail.pl in Insite Inmail allows remote attackers to inject arbitrary web script or HTML via the acao parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: inshop, inmail
References: http://marc.info/?l=bugtraq&m=110140029419018&w=2, http://secunia.com/advisories/13188/, http://www.securityfocus.com/bid/11758
CVE-2004-1815
Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: coldfusion, jrun, one_application_server
References: http://marc.info/?l=bugtraq&m=107936690702515&w=2, http://secunia.com/advisories/11132, http://www.macromedia.com/devnet/security/security_zone/mpsb04-04.html
CVE-2004-0918
The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: secure_linux, linux, openpkg, fedora_core, squid
Related CWEs: CWE-399
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.16/SCOSA-2005.16.txt, http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000923, http://fedoranews.org/updates/FEDORA--.shtml
CWE: CWE-399
CVE-2004-2118
Tiny Server 1.1 allows remote attackers to cause a denial of service (crash) via a GET request with a long filename, possibly due to a buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tinyserver
References: http://marc.info/?l=bugtraq&m=107496530806730&w=2, http://secunia.com/advisories/10707, http://www.autistici.org/fdonato/advisory/tinyServer1.1%5B1.0.5%5D-adv.txt
CVE-2004-0767
NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the ObjectAttribues parameter to the hooks for the (1) ZwCreateFile or (2) ZwOpenFile functions.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: stackdefender
References: http://www.idefense.com/application/poi/display?id=118&type=vulnerabilities&flashstatus=false, https://exchange.xforce.ibmcloud.com/vulnerabilities/16879, http://www.idefense.com/application/poi/display?id=118&type=vulnerabilities&flashstatus=false
CVE-2004-1049
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, windows_xp, windows_2003_server
References: http://marc.info/?l=bugtraq&m=110382891718076&w=2, http://secunia.com/advisories/13645, http://securitytracker.com/id?1012684
CVE-2004-0875
Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: phpgroupware
References: http://downloads.phpgroupware.org/changelog, http://www.gentoo.org/security/en/glsa/glsa-200409-22.xml, https://exchange.xforce.ibmcloud.com/vulnerabilities/17289
CVE-2004-1549
The conference menu in ActivePost Standard 3.1 sends passwords of password-protected rooms in cleartext, which could allow remote attackers to gain sensitive information by sniffing the network connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: activepost_standard
References: http://aluigi.altervista.org/adv/actp-adv.txt, http://marc.info/?l=bugtraq&m=109597139011373&w=2, http://secunia.com/advisories/12642/
CVE-2004-0725
Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: moodle
References: http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/help.php, http://marc.info/?l=bugtraq&m=108973588000027&w=2, http://www.securityfocus.com/bid/10718
CVE-2004-1665
Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: psnews
References: http://marc.info/?l=bugtraq&m=109458516524494&w=2, http://securitytracker.com/id?1011191, http://www.securityfocus.com/bid/11124
CVE-2004-2030
Multiple cross-site scripting (XSS) vulnerabilities in index.jsp for Liferay before 2.2.0 release 10/1/2004 allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the message subject.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: liferay_enterprise_portal
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=108526683823840&w=2, http://marc.info/?l=bugtraq&m=110141194202856&w=2, http://secunia.com/advisories/11692
CWE: CWE-79
CVE-2004-0715
The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group members to gain privileges.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: weblogic_server
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_52.01.jsp, http://secunia.com/advisories/11356, http://securitytracker.com/id?1009763
CVE-2004-2662
Soft3304 04WebServer before 1.41 allows remote attackers to cause a denial of service (resource consumption or crash) via certain data related to OpenSSL, which causes a thread to terminate but continue to hold resources.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: 04webserver
References: http://www.soft3304.net/04WebServer/Security.html, http://www.soft3304.net/04WebServer/Security.html
CVE-2004-2518
Gattaca Server 2003 1.1.10.0 allows remote attackers to obtain sensitive information via (1) a trailing null byte ("%00") to a URL or (2) an invalid LANGUAGE parameter to web.tmpl, which reveals the full installation path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: gattaca_server_2003
References: http://members.lycos.co.uk/r34ct/main/Gattaca%20Server%202003.txt, http://secunia.com/advisories/12071, http://securitytracker.com/id?1010703
CVE-2004-1525
Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via the status command.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: hired_team_trial
References: http://marc.info/?l=bugtraq&m=110054260919742&w=2, http://secunia.com/advisories/13207, http://www.securityfocus.com/bid/11683
CVE-2004-0671
Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying the id parameter in a viewMsgDetails.do request.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: brightmail_antispam
References: http://marc.info/?l=bugtraq&m=108880205115802&w=2, http://marc.info/?l=bugtraq&m=108981452101353&w=2, http://www.securityfocus.com/bid/10657
CVE-2004-2400
WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access to the credentials.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: winftp_server
References: http://secunia.com/advisories/13304, http://securitytracker.com/id?1012321, http://www.osvdb.org/12122
CVE-2004-1475
Multiple stack-based buffer overflows in xine-lib 1-rc2 through 1-rc5 allow attackers to execute arbitrary code via (1) long VideoCD vcd:// MRLs or (2) long subtitle lines.
CVSS v2.0 Score: 5.1 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected Products: xine, xine-lib
References: http://security.gentoo.org/glsa/glsa-200408-18.xml, http://www.gentoo.org/security/en/glsa/glsa-200409-30.xml, http://www.securityfocus.com/archive/1/375485/2004-09-02/2004-09-08/0
CVE-2004-0683
Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains a large number of directories.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: norton_antivirus
References: http://marc.info/?l=bugtraq&m=108938579712894&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16658, http://marc.info/?l=bugtraq&m=108938579712894&w=2
CVE-2004-2313
Inter7 SqWebMail 3.4.1 through 3.6.1 generates different error messages for incorrect passwords versus correct passwords on non-mail-enabled accounts (such as root), which allows remote attackers to guess the root password via brute force attacks.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: sqwebmail
References: http://www.securityfocus.com/archive/1/352317, http://www.securityfocus.com/bid/9541, https://exchange.xforce.ibmcloud.com/vulnerabilities/15058
CVE-2004-1286
Buffer overflow in the auto_filter_extern function in auto.c for NapShare 1.2, with the extern filter enabled, allows remote attackers to execute arbitrary code via a crafted gnutella response.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: napshare
References: http://tigger.uic.edu/~jlongs2/holes/napshare.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/18630, http://tigger.uic.edu/~jlongs2/holes/napshare.txt
CVE-2004-2226
Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets (CSS) document on the attacker's server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: thunderbird
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-11/0070.html, http://secunia.com/advisories/13086, http://www.osvdb.org/11394
CVE-2004-1802
Chat Anywhere 2.72 and earlier allows remote attackers to hide their IP address by using %00 before the nickname, which causes the IP address to be displayed as $IP$ on the administration web page.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: chat_anywhere
References: http://aluigi.altervista.org/adv/chatany-ghost-adv.txt, http://marc.info/?l=bugtraq&m=107885946220895&w=2, http://www.lionmax.com/chatanywhere.htm
CVE-2004-1904
Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: activescan
References: http://marc.info/?l=bugtraq&m=108130573130482&w=2, http://secunia.com/advisories/11312, http://theinsider.deep-ice.com/texts/advisory53.txt
CVE-2004-1934
PHP remote file inclusion vulnerability in affich.php in Gemitel 3.50 allows remote attackers to execute arbitrary PHP code via the base parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gemitel
References: http://marc.info/?l=bugtraq&m=108206642725505&w=2, http://secunia.com/advisories/11393, http://securitytracker.com/id?1009824
CVE-2004-0619
Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: kernel, fedora_core, linux
References: http://marc.info/?l=bugtraq&m=108802653409053&w=2, http://secunia.com/advisories/11936, http://www.ciac.org/ciac/bulletins/p-047.shtml
CVE-2004-2017
Multiple cross-site scripting (XSS) vulnerabilities in Turbo Traffic Trader C (TTT-C) 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via (1) the link parameter to ttt-out, (2) the X-Forwarded-For header in a GET request to ttt-in, (3) the Referer header in a GET request to ttt-in, or the (4) site name or (5) site URL fields in the main control panel.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: turbotraffictrader_c
References: http://marc.info/?l=bugtraq&m=108481571131866&w=2, http://secunia.com/advisories/11623, http://www.icefire.org/security/ttt-bugreport.txt
CVE-2004-1061
Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: bugzilla
References: http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=001040, http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030222.html, http://www.mikx.de/index.php?p=6
CVE-2004-2467
chat.ghp in Easy Chat Server 1.2 allows remote attackers to add a large number of fake users, then eventually cause a denial of service (server crash).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: easy_chat_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-07/0013.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-07/0077.html, http://secunia.com/advisories/12006
CVE-2004-0731
Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary script as other users via the input field.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=109002107329823&w=2, http://www.waraxe.us/index.php?modname=sa&id=35, https://exchange.xforce.ibmcloud.com/vulnerabilities/16721
CVE-2004-0813
Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: ide-cd
References: ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc, http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html, http://lkml.org/lkml/2004/7/30/147
CVE-2004-0728
The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: systems_management_server
References: http://marc.info/?l=bugtraq&m=108983763710315&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/16696, http://marc.info/?l=bugtraq&m=108983763710315&w=2
CVE-2004-2223
FsPHPGallery before 1.2 allows remote attackers to cause a denial of service via an image with a large size attribute, which causes a crash when the server attempts to resize the image.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fsphpgallery
References: http://secunia.com/advisories/13074, http://securitytracker.com/id?1012063, http://www.osvdb.org/11389
CVE-2004-0455
Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: www-sql, debian_linux
Related CWEs: CWE-120
Related CAPECs: CAPEC-14, CAPEC-92, CAPEC-45
References: http://www.debian.org/security/2004/dsa-523, http://www.securityfocus.com/bid/10577, https://exchange.xforce.ibmcloud.com/vulnerabilities/16455
CWE: CWE-120
CVE-2004-2432
WinAgents TFTP Server 3.0 allows remote attackers to cause a denial of service (crash) via a request for a file with a long file name, possibly due to an off-by-one buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: tftp_server
References: http://secunia.com/advisories/11840, http://securitytracker.com/id?1010464, http://www.osvdb.org/6848
CVE-2004-2322
SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANN_id parameter to the announce module.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpwebsite
References: http://secunia.com/advisories/10878/, http://sourceforge.net/tracker/index.php?func=detail&aid=892174&group_id=15539&atid=115539, http://www.osvdb.org/3852
CVE-2004-2081
The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service (pmsystem.exe crash) by issuing (1) a CD command with a tilde (~) character or dot dot (/../) or (2) a GET command for an unavailable file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: sami_ftp_server
References: http://www.karja.com/samiftp/news.html, http://www.securityfocus.com/archive/1/353753, http://www.securityfocus.com/bid/9657
CVE-2004-1915
Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: lcdproc
References: http://lists.omnipotent.net/pipermail/lcdproc/2004-April/008884.html, http://marc.info/?l=bugtraq&m=108145722229810&w=2, http://secunia.com/advisories/11333
CVE-2004-2307
Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI with double backslashes (\\) in an HTML tag such as IFRAME or A.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: windows_xp, internet_explorer
References: http://www.securityfocus.com/archive/1/358043, http://www.securityfocus.com/bid/9924, https://exchange.xforce.ibmcloud.com/vulnerabilities/15544
CVE-2004-0396
Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: cvs
References: ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2004-008.txt.asc, ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:10.cvs.asc, http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0980.html
CVE-2004-0166
Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x_server, mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Feb/msg00000.html, http://secunia.com/advisories/10959, http://www.kb.cert.org/vuls/id/194238
CVE-2004-1559
Multiple cross-site scripting (XSS) vulnerabilities in Wordpress 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) redirect_to, text, popupurl, or popuptitle parameters to wp-login.php, (2) redirect_url parameter to admin-header.php, (3) popuptitle, popupurl, content, or post_title parameters to bookmarklet.php, (4) cat_ID parameter to categories.php, (5) s parameter to edit.php, or (6) s or mode parameter to edit-comments.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: wordpress
References: http://marc.info/?l=bugtraq&m=109641484723194&w=2, http://secunia.com/advisories/12683, http://securitytracker.com/id?1011440
CVE-2004-1010
Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: zip
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028379.html, http://marc.info/?l=bugtraq&m=109958840611053&w=2, http://secunia.com/advisories/13094/
CVE-2004-2112
Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in the URL.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: bremsserver
References: http://marc.info/?l=bugtraq&m=107513747107031&w=2, http://secunia.com/advisories/10731, http://www.osvdb.org/3755
CVE-2004-0348
SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: spidersales
References: http://marc.info/?l=bugtraq&m=107833097705486&w=2, http://www.s-quadra.com/advisories/Adv-20040303.txt, http://www.securityfocus.com/bid/9799
CVE-2004-2358
Cross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpbb
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0219.html, http://www.securityfocus.com/bid/9896, https://exchange.xforce.ibmcloud.com/vulnerabilities/15579
CVE-2004-1645
Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x, or (3) param parameter to testgetrequest.x.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: xedus
References: http://marc.info/?l=bugtraq&m=109394018411394&w=2, http://secunia.com/advisories/12418, http://www.gulftech.org/?node=research&article_id=00047-08302004
CVE-2004-1324
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
CVSS v2.0 Score: 2.6 (LOW)
CVSS v2.0 Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N
Affected Products: windows_media_player
References: http://marc.info/?l=bugtraq&m=110352518211306&w=2, http://www.securityfocus.com/bid/12031, https://exchange.xforce.ibmcloud.com/vulnerabilities/18576
CVE-2004-1051
sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: debian_linux, mandrake_multi_network_firewall, secure_linux, mandrake_linux, mandrake_linux_corporate_server
References: http://lists.apple.com/archives/security-announce/2005/May/msg00001.html, http://marc.info/?l=bugtraq&m=110028877431192&w=2, http://marc.info/?l=bugtraq&m=110598298225675&w=2
CVE-2004-1729
Cross-site scripting (XSS) vulnerability in Nihuo Web Log Analyzer 1.6 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: web_log_analyzer
References: http://marc.info/?l=bugtraq&m=109305923208449&w=2, http://secunia.com/advisories/12347, http://www.securityfocus.com/bid/10988
CVE-2004-0262
Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: the_palace_client
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0033.html, http://marc.info/?l=bugtraq&m=107634556632195&w=2, http://www.elitehaven.net/thepalace.txt
CVE-2004-0212
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: definity_one_media_server, modular_messaging_message_storage_server, windows_2000, windows_nt, windows_xp
References: http://marc.info/?l=bugtraq&m=108981273009250&w=2, http://marc.info/?l=bugtraq&m=108981403025596&w=2, http://secunia.com/advisories/12060
CVE-2004-1625
pGina 1.7.6 and possibly older versions, when the Restart or Shutdown options are enabled on the login screen, allows remote attackers to cause a denial of service by connecting via Remote Desktop and clicking restart or shutdown.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: pgina
References: http://marc.info/?l=bugtraq&m=109849689808245&w=2, http://www.lovebug.org/pgina_dos.txt, https://exchange.xforce.ibmcloud.com/vulnerabilities/17836
CVE-2004-2642
Yeemp 0.9.9 and earlier does not properly encrypt inbound files, which allows remote attackers to spoof the identity of the sender.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: yeemp
References: http://deekoo.net/technocracy/yeemp/#advisory, http://deekoo.net/technocracy/yeemp/changes.html, http://secunia.com/advisories/12795
CVE-2004-0003
Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking."
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: linux_kernel
References: http://secunia.com/advisories/10782, http://secunia.com/advisories/10911, http://secunia.com/advisories/10912
CVE-2004-0826
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: java_system_application_server, directory_server, network_security_services, java_enterprise_system, personalization_engine
References: http://marc.info/?l=bugtraq&m=109351293827731&w=2, http://www.securityfocus.com/bid/11015, http://xforce.iss.net/xforce/alerts/id/180
CVE-2004-1955
SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phprofession
References: http://marc.info/?l=bugtraq&m=108258931430060&w=2, http://secunia.com/advisories/11465, http://www.osvdb.org/5625
CVE-2004-2303
MTools Mformat before 3.9.9, when installed setuid root, creates files with world-readable and world-writable permissions, which allows local users to read and overwrite files.
CVSS v2.0 Score: 3.6 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products: mformat
References: http://www.mandriva.com/security/advisories?name=MDKSA-2004:016, http://www.securityfocus.com/bid/9746, https://exchange.xforce.ibmcloud.com/vulnerabilities/15317
CVE-2004-0263
PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: http_server
References: http://security.gentoo.org/glsa/glsa-200402-01.xml, http://www.osvdb.org/3878, http://www.securityfocus.com/bid/9599
CVE-2004-2574
Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to inject arbitrary web script or HTML via the date parameter in a calendar.uicalendar.planner menuaction.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: phpgroupware
References: http://www.osvdb.org/7600, http://www.securityfocus.com/bid/12082, https://savannah.gnu.org/bugs/?func=detailitem&item_id=7478
CVE-2004-2629
Multiple vulnerabilities in the H.323 protocol implementation for First Virtual Communications Click to Meet Express (when used with H.323 conferencing endpoints), Click to Meet Premier, Conference Server, and V-Gate allow remote attackers to cause a denial of service, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: click_to_meet_premier, v-gate, conference_server, click_to_meet_express
References: http://secunia.com/advisories/11192, http://support.fvc.com/eng/docs/misc_docs/H.323_Security_Bulletin.pdf, http://www.cert.org/advisories/CA-2004-01.html
CVE-2004-0319
Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary script as other users, as demonstrated using the background:url in a (1) font color or (2) font face argument.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: ezboard
References: http://marc.info/?l=bugtraq&m=107756639427140&w=2, http://www.securityfocus.com/bid/9725, https://exchange.xforce.ibmcloud.com/vulnerabilities/15287
CVE-2004-1637
The Hawking Technologies HAR11A modem/router allows remote attackers to obtain sensitive information by connecting to port 254, which displays a management interface and information on established connections.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: har11a_dsl_router
References: http://marc.info/?l=bugtraq&m=109882884617886&w=2, http://www.securityfocus.com/bid/11543, https://exchange.xforce.ibmcloud.com/vulnerabilities/17877
CVE-2004-2039
e107 0.615 allows remote attackers to obtain sensitive information via a direct request to (1) alt_news.php, (2) backend_menu.php, (3) clock_menu.php, (4) counter_menu.php, (5) login_menu.php, and other files, which reveal the full path in a PHP error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: e107
References: http://marc.info/?l=bugtraq&m=108588043007224&w=2, http://marc.info/?l=full-disclosure&m=108586723116427&w=2, http://secunia.com/advisories/11740
CVE-2004-0628
Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: mysql
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0001.html, http://marc.info/?l=bugtraq&m=108904917528205&w=2, http://www.kb.cert.org/vuls/id/645326
CVE-2004-2768
dpkg 1.9.21 does not properly reset the metadata of a file during replacement of the file in a package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid file, (2) setgid file, or (3) device, a related issue to CVE-2010-2059.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dpkg
Related CWEs: CWE-264
References: http://lists.jammed.com/ISN/2003/12/0056.html, http://www.hackinglinuxexposed.com/articles/20031214.html, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=225692
CWE: CWE-264
CVE-2004-1734
PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the (1) t_core_path parameter to bug_api.php or (2) t_core_dir parameter to relationship_api.php to reference a URL on a remote web server that contains the code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mantis
References: http://marc.info/?l=bugtraq&m=109313416727851&w=2, http://www.securityfocus.com/bid/10993, https://exchange.xforce.ibmcloud.com/vulnerabilities/17065
CVE-2004-0851
The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: net-acct
References: http://exorsus.net/projects/net-acct/net-acct-notempfiles.patch, http://marc.info/?l=bugtraq&m=109466910232385&w=2, http://secunia.com/advisories/12476
CVE-2004-0296
TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: broker_ftp_server
References: http://marc.info/?l=bugtraq&m=107705346817241&w=2, http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html, http://www.securityfocus.com/bid/9680