DuyTa/cve-kgrag-db huggingface dataset:
CVE-2004-0774
RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: helix_universal_server, helix_universal_mobile_server_and_gateway
References: http://www.idefense.com/application/poi/display?id=151&type=vulnerabilities, https://exchange.xforce.ibmcloud.com/vulnerabilities/17648, http://www.idefense.com/application/poi/display?id=151&type=vulnerabilities
CVE-2004-1926
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2) Country, (3) Real Name, or (4) Displayed time zone fields in a User Profile, or the (5) Name, (6) Description, (7) URL, or (8) Country fields in a Directory/Add Site operation.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: tikiwiki_cms//groupware
Related CWEs: CWE-94
Related CAPECs: CAPEC-242, CAPEC-77, CAPEC-35
MITRE ATT&CK Techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK Tactics: T1564, T1027
References: http://marc.info/?l=bugtraq&m=108180073206947&w=2, http://secunia.com/advisories/11344, http://tikiwiki.org/tiki-read_article.php?articleId=66
CWE: CWE-94
MITRE ATT&CK techniques: T1027.006, T1564.009, T1027.009
MITRE ATT&CK tactics: T1564, T1027
CVE-2004-2723
NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: nessuswx
Related CWEs: CWE-255
References: http://seclists.org/fulldisclosure/2004/Mar/1343.html, http://securitytracker.com/id?1009577, http://www.osvdb.org/4814
CWE: CWE-255
CVE-2004-2080
Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier (SSID) to a single space, which prevents Red-Alert from correctly identifying the SSID.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: red-alert
References: http://genhex.org/releases/031003.txt, http://marc.info/?l=full-disclosure&m=107635119005407&w=2, http://securitytracker.com/id?1009001
CVE-2004-0209
Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: windows_2000, windows_xp, windows_2003_server
References: http://marc.info/?l=bugtraq&m=109829067325779&w=2, http://www.kb.cert.org/vuls/id/806278, http://www.securityfocus.com/bid/11375
CVE-2004-1817
Cross-site scripting (XSS) vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) Your Name field, (2) e-mail field, (3) nicname field, (4) fname parameter, (5) ratenum parameter, or (6) search field.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: php-nuke
References: http://marc.info/?l=bugtraq&m=107937752811633&w=2, http://secunia.com/advisories/11135, http://www.securityfocus.com/bid/9879
CVE-2004-0949
The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.
CVSS v2.0 Score: 6.4 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products: enterprise_linux, suse_linux, secure_linux, linux_kernel, linux_advanced_workstation
References: http://marc.info/?l=bugtraq&m=110072140811965&w=2, http://secunia.com/advisories/13232/, http://secunia.com/advisories/20162
CVE-2004-0297
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: imail
References: http://www.idefense.com/application/poi/display?id=74, http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html, http://www.kb.cert.org/vuls/id/972334
CVE-2004-0461
The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: dns_one_appliance, suse_linux, suse_email_server, suse_linux_connectivity_server, mandrake_linux
References: http://marc.info/?l=bugtraq&m=108795911203342&w=2, http://marc.info/?l=bugtraq&m=108843959502356&w=2, http://marc.info/?l=bugtraq&m=108938625206063&w=2
CVE-2004-0207
"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_2000, windows_nt, windows_xp, windows_98, windows_2003_server
References: http://marc.info/?l=bugtraq&m=109777417922695&w=2, http://www.kb.cert.org/vuls/id/218526, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032
CVE-2004-2434
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon left brace), which triggers a null dereference when the user attempts to save the link using "Save As" and Internet Explorer prepares an error message with an attacker-controlled format string.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ie
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0397.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0428.html, http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1126.html
CVE-2004-0203
Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: exchange_server
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://www.kb.cert.org/vuls/id/948750, https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-026, https://exchange.xforce.ibmcloud.com/vulnerabilities/16583
CWE: CWE-79
CVE-2004-1958
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in a UMOD (Unreal MOD) file.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: unreal_tournament_2003, unreal_tournament, unreal_engine
References: http://aluigi.altervista.org/adv/umod-adv.txt, http://marc.info/?l=bugtraq&m=108267310519459&w=2, http://www.securityfocus.com/bid/10196
CVE-2004-1385
phpGroupWare 0.9.16.003 and earlier allows remote attackers to gain sensitive information via (1) unexpected characters in the session ID such as shell metacharacters, (2) an invalid appname parameter to preferences.php or (3) an invalid menuaction parameter to index.php, which reveals the web server path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: phpgroupware
References: http://marc.info/?l=bugtraq&m=110312656029072&w=2, http://www.gentoo.org/security/en/glsa/glsa-200501-08.xml, http://www.gulftech.org/?node=research&article_id=00054-12142004
CVE-2004-1805
Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in class names.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: unreal_engine
References: http://aluigi.altervista.org/adv/unrfs-adv.txt, http://marc.info/?l=bugtraq&m=107893764406905&w=2, http://marc.info/?l=bugtraq&m=107902755204583&w=2
CVE-2004-0389
RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.
CVSS v3.1 Score: 7.5 (HIGH)
CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Affected Products: helix_universal_server
Related CWEs: CWE-476
References: http://secunia.com/advisories/11395, http://www.idefense.com/application/poi/display?id=102&type=vulnerabilities, http://www.securityfocus.com/bid/10157
CWE: CWE-476
CVE-2004-1072
The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: enterprise_linux, suse_linux, secure_linux, linux_kernel, linux_advanced_workstation
References: ftp://patches.sgi.com/support/free/security/advisories/20060402-01-U, http://secunia.com/advisories/19607, http://secunia.com/advisories/20162
CVE-2004-0363
Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: norton_antispam
References: http://marc.info/?l=bugtraq&m=107970870606638&w=2, http://marc.info/?l=bugtraq&m=107980262324362&w=2, http://secunia.com/advisories/11169
CVE-2004-1122
Safari 1.x to 1.2.4, and possibly other versions, allows inactive windows to launch dialog boxes, which can allow remote attackers to spoof the dialog boxes from web sites in other windows, aka the "Dialog Box Spoofing Vulnerability," a different vulnerability than CVE-2004-1314.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: safari
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://secunia.com/advisories/12892, http://secunia.com/multiple_browsers_dialog_box_spoofing_test/
CVE-2004-0623
Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: gnats
References: http://marc.info/?l=bugtraq&m=108820000823191&w=2, http://www.securityfocus.com/bid/10609, https://exchange.xforce.ibmcloud.com/vulnerabilities/16517
CVE-2004-2087
Unknown vulnerability in SandSurfer before 1.7.0 allows remote attackers to gain access as a logged-in user.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sandsurfer
References: http://secunia.com/advisories/10829, http://securitytracker.com/id?1009110, http://sourceforge.net/forum/forum.php?forum_id=351705
CVE-2004-0359
Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f, (3) showtopic, (4) showuser, or (5) username parameters.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: invision_board
References: http://marc.info/?l=bugtraq&m=107851589701916&w=2, http://secunia.com/advisories/11053, http://www.osvdb.org/4154
CVE-2004-1193
Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\physicalmemory, which restores the running kernel's original SDT ServiceTable.
CVSS v2.0 Score: 6.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:C/A:C
Affected Products: prevx_home
Related CWEs: CWE-264
References: http://marc.info/?l=bugtraq&m=110118902823639&w=2, http://marc.info/?l=bugtraq&m=110138413816367&w=2, http://securitytracker.com/id?1012294
CWE: CWE-264
CVE-2004-2250
Unknown vulnerability in the "access code" in RemoteEditor before 0.1.6 has unknown impact and attack vectors, possibly involving a bypass of IP address restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: audienceconnect_remoteeditor
References: http://securitytracker.com/id?1012148, http://sourceforge.net/project/shownotes.php?group_id=98629&release_id=279743, http://www.osvdb.org/11445
CVE-2004-0510
Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openserver
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt, http://marc.info/?l=bugtraq&m=109889281711636&w=2, http://www.deprotect.com/advisories/DEPROTECT-20040206.txt
CVE-2004-1573
The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: cutenews, aj-fork
References: http://echo.or.id/adv/adv07-y3dips-2004.txt, http://marc.info/?l=bugtraq&m=109664986210763&w=2, http://securitytracker.com/id?1011484
CVE-2004-0673
Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: sci_photo_chat
References: http://marc.info/?l=bugtraq&m=108880460730833&w=2, http://www.securityfocus.com/bid/10648, https://exchange.xforce.ibmcloud.com/vulnerabilities/16602
CVE-2004-0985
Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: ie
References: http://marc.info/?l=bugtraq&m=109829111200055&w=2, http://marc.info/?l=bugtraq&m=109830296130857&w=2, http://marc.info/?l=ntbugtraq&m=109828076802478&w=2
CVE-2004-2756
Cross-site scripting (XSS) vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the (1) forum and (2) topic_id parameters.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: xoops
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://securitytracker.com/id?1008849, http://www.securityfocus.com/bid/9497, http://securitytracker.com/id?1008849
CWE: CWE-79
CVE-2004-1427
PHP remote file inclusion vulnerability in main.inc in KorWeblog 1.6.2-cvs and earlier allows remote attackers to execute arbitrary PHP code by modifying the G_PATH parameter to reference a URL on a remote web server that contains the code, as demonstrated in index.php when using .. (dot dot) sequences in the lng parameter to cause main.inc to be loaded.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: korweblog
References: http://marc.info/?l=bugtraq&m=110442847614890&w=2, http://secunia.com/advisories/13700, http://www.securityfocus.com/bid/12132
CVE-2004-2566
Multiple cross-site scripting (XSS) vulnerabilities in LiveWorld products, possibly including (1) LiveForum, (2) LiveQ&A, (3) LiveChat, and (4) LiveFocusGroup, allow remote attackers to inject arbitrary web script or HTML via the q parameter in (a) search.jsp, (b) findclub!execute.jspa, and (c) search!execute.jspa.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: livechat, liveq_and_a, livefocusgroup, liveforum
References: http://archives.neohapsis.com/archives/bugtraq/2004-08/0326.html, http://securitytracker.com/id?1011036, http://www.gulftech.org/?node=research&article_id=00044-08232004
CVE-2004-2277
Buffer overflow in aGSM Half-Life client allows remote Half-Life servers to cause a denial of service (crash) and possibly execute arbitrary code via a long server response.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: agsm
References: http://secunia.com/advisories/12334, http://securitytracker.com/id?1010989, http://www.osvdb.org/9072
CVE-2004-2276
F-Secure Anti-Virus 5.41 and 5.42 on Windows, Client Security 5.50 and 5.52, 4.60 for Samba Servers, and 4.52 and earlier for Linux does not properly detect certain viruses in a PKZip archive, which allows viruses such as Sober.D and Sober.G to bypass initial detection.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: f-secure_anti-virus
References: http://secunia.com/advisories/11699, http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-linux-hotfixes.shtml, http://support.f-secure.de/ger/home/downloads/hotfixes/av5-hotfixes.shtml
CVE-2004-0227
Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: zoneminder
References: http://www.securityfocus.com/bid/10340, http://www.zoneminder.com/index.php?id=20&type=0&backPID=20&tt_news=29, https://exchange.xforce.ibmcloud.com/vulnerabilities/16136
CVE-2004-0752
OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: openoffice
References: http://marc.info/?l=bugtraq&m=109483308421566&w=2, http://secunia.com/advisories/12302/, http://secunia.com/advisories/12546/
CVE-2004-0942
Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: http_server
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html, http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html, http://lists.grok.org.uk/pipermail/full-disclosure/2004-November/028248.html
CVE-2004-0047
Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain privileges.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: trr19
References: http://secunia.com/advisories/10744/, http://secunia.com/advisories/10745, http://www.debian.org/security/2004/dsa-430
CVE-2004-0016
The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: phpgroupware
References: http://www.debian.org/security/2004/dsa-419, http://www.osvdb.org/6860, http://www.securityfocus.com/bid/9387
CVE-2004-0655
eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: emerge_search_tool
References: http://www.gentoo.org/security/en/glsa/glsa-200407-01.xml, http://www.securityfocus.com/bid/10644, https://exchange.xforce.ibmcloud.com/vulnerabilities/16584
CVE-2004-2111
Stack-based buffer overflow in the site chmod command in Serv-U FTP Server before 4.2 allows remote attackers to execute arbitrary code via a long filename.
CVSS v2.0 Score: 8.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Affected Products: serv-u_file_server
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://archives.neohapsis.com/archives/bugtraq/2004-01/0249.html, http://marc.info/?l=bugtraq&m=107513654005840&w=2, http://securitytracker.com/id?1008841
CWE: CWE-119
CVE-2004-2511
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 5.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the year, (2) month, and (3) day parameters in calendar.php; (4) the cid and (5) url parameters in index.php; (6) the cid parameter in annoucement.php; (7) the cid parameter in news.php; (8) the cid parameter in contents.php; (9) the q parameter in search.php; and (10) the country parameter in register.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: dcp-portal
References: http://archives.neohapsis.com/archives/bugtraq/2004-10/0042.html, http://secunia.com/advisories/12751, http://securitytracker.com/id?1006351
CVE-2004-0735
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo query, (2) the connect packet, and other unknown vectors.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: medal_of_honor_allied_assault
References: http://marc.info/?l=bugtraq&m=109008314631518&w=2, http://www.securityfocus.com/bid/10743, https://exchange.xforce.ibmcloud.com/vulnerabilities/16715
CVE-2004-1140
Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (application hang) and possibly fill available disk space via an invalid RTP timestamp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: ethereal
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000916, http://secunia.com/advisories/13468/, http://www.ciac.org/ciac/bulletins/p-061.shtml
CVE-2004-1026
Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: imlib, linux
References: http://www.debian.org/security/2005/dsa-628, http://www.gentoo.org/security/en/glsa/glsa-200412-03.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2005:007
CVE-2004-2002
Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certain UDP packet.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: irix
References: ftp://patches.sgi.com/support/free/security/advisories/20040502-01-P.asc, http://www.securityfocus.com/bid/10287, https://exchange.xforce.ibmcloud.com/vulnerabilities/16158
CVE-2004-2100
GeoHttpServer, when configured to authenticate users, allows remote attackers to bypass authentication and access unauthorized files via a URL that contains %0a%0a (encoded newlines).
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: geohttpserver
References: http://marc.info/?l=bugtraq&m=107480261825214&w=2, http://marc.info/?l=bugtraq&m=107480261825214&w=2
CVE-2004-2279
Cross-site scripting (XSS) vulnerability in Invision Power Board 1.3 Final allows remote attackers to execute arbitrary script as other users via the pop parameter in a chat action to index.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: invision_power_board
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0082.html, https://exchange.xforce.ibmcloud.com/vulnerabilities/15448, http://archives.neohapsis.com/archives/bugtraq/2004-03/0082.html
CVE-2004-1043
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_xp, internet_explorer
References: http://archives.neohapsis.com/archives/bugtraq/2004-12/0426.html, http://www.kb.cert.org/vuls/id/972415, http://www.us-cert.gov/cas/techalerts/TA05-012B.html
CVE-2004-2709
Buffer overflow in the strip_html_tags method for Gyach Enhanced (Gyach-E) before 1.0.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors involving HTML tags.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: gyach_enhanced
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.osvdb.org/8969, http://www.phrozensmoke.com/projects/pyvoicechat/changelog.php, http://www.osvdb.org/8969
CWE: CWE-119
CVE-2004-1863
Multiple cross-site scripting (XSS) vulnerabilities in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allow remote attackers to inject arbitrary web script or HTML via (1) the u2uheader parameter in editprofile.php, the restrict parameter in (2) member.php, (3) misc.php, and (4) today.php, and (5) an arbitrary parameter in phpinfo.php.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: xmb
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://marc.info/?l=bugtraq&m=108032355905265&w=2, http://www.osvdb.org/14982, http://www.osvdb.org/14989
CWE: CWE-79
CVE-2004-0085
Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: mac_os_x
References: http://lists.apple.com/archives/security-announce/2004/Jan/msg00000.html, http://www.securityfocus.com/bid/9504, https://exchange.xforce.ibmcloud.com/vulnerabilities/14992
CVE-2004-0413
libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: openpkg, subversion
References: http://subversion.tigris.org/security/CAN-2004-0413-advisory.txt, http://www.gentoo.org/security/en/glsa/glsa-200406-07.xml, http://www.novell.com/linux/security/advisories/2004_18_subversion.html
CVE-2004-0302
Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter in index.php, (2) editfile in glossary.php, or (3) editfile in newmultiplechoice.php.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: owls_workshop
References: http://marc.info/?l=bugtraq&m=107712123305706&w=2, http://www.securityfocus.com/bid/9689, http://www.zone-h.org/en/advisories/read/id=3973/
CVE-2004-1361
Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: windows_2000, windows_nt, windows_xp, windows_2003_server
References: http://marc.info/?l=bugtraq&m=110383690219440&w=2, http://www.securityfocus.com/bid/12091, http://www.xfocus.net/flashsky/icoExp/
CVE-2004-0810
Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service (server process crash) via a certain data string that is sent to multiple simultaneous client connections to TCP port 407.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: timbuktu_pro_mac
References: http://msgs.securepoint.com/cgi-bin/get/bugtraq0411/218.html, http://secunia.com/advisories/13250/, http://www.corsaire.com/advisories/c040720-001.txt
CVE-2004-1461
Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: secure_acs_solution_engine, secure_access_control_server
References: http://www.cisco.com/warp/public/707/cisco-sa-20040825-acs.shtml, http://www.securityfocus.com/bid/11047, https://exchange.xforce.ibmcloud.com/vulnerabilities/17118
CVE-2004-0795
DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: db2_universal_database
References: http://marc.info/?l=bugtraq&m=107885081414173&w=2, http://www-1.ibm.com/support/docview.wss?uid=swg1IY53894, http://www.nextgenss.com/advisories/db2rmtcmd.txt
CVE-2004-0469
Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: vpn-1, firewall-1, next_generation, ng-ai
References: http://www.checkpoint.com/techsupport/alerts/ike_vpn.html, http://www.securityfocus.com/bid/10273, https://exchange.xforce.ibmcloud.com/vulnerabilities/16060
CVE-2004-0745
LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: lha
References: http://www.gentoo.org/security/en/glsa/glsa-200409-13.xml, http://www.redhat.com/support/errata/RHSA-2004-323.html, http://www.redhat.com/support/errata/RHSA-2004-440.html
CVE-2004-0305
Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter.
CVSS v2.0 Score: 6.8 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected Products: webstores_2000
References: http://marc.info/?l=bugtraq&m=107712159425226&w=2, http://www.securityfocus.com/bid/9693, https://exchange.xforce.ibmcloud.com/vulnerabilities/15254
CVE-2004-2343
Apache HTTP Server 2.0.47 and earlier allows local users to bypass .htaccess file restrictions, as specified in httpd.conf with directives such as Deny From All, by using an ErrorDocument directive. NOTE: the vendor has disputed this issue, since the .htaccess mechanism is only intended to restrict external web access, and a local user already has the privileges to perform the same operations without using ErrorDocument
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: http_server
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0043.html, http://archives.neohapsis.com/archives/bugtraq/2004-02/0064.html, http://archives.neohapsis.com/archives/bugtraq/2004-02/0120.html
CVE-2004-0587
Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected Products: mandrake_linux_corporate_server, suse_linux, fedora_core, mandrake_linux
References: ftp://patches.sgi.com/support/free/security/advisories/20040804-01-U.asc, http://lwn.net/Articles/91155/, http://securitytracker.com/id?1010057
CVE-2004-1318
Cross-site scripting (XSS) vulnerability in namazu.cgi for Namazu 2.0.13 and earlier allows remote attackers to inject arbitrary HTML and web script via a query that starts with a tab ("%09") character, which prevents the rest of the query from being properly sanitized.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: namazu
References: http://jvn.jp/jp/JVN%23904429FE.html, http://secunia.com/advisories/13600, http://securitytracker.com/alerts/2005/Jan/1012802.html
CVE-2004-0123
Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: windows_2000, windows_nt, windows_me, windows_98se, windows_98
Related CWEs: CWE-119
Related CAPECs: CAPEC-14, CAPEC-45, CAPEC-9
References: http://www.ciac.org/ciac/bulletins/o-114.shtml, http://www.kb.cert.org/vuls/id/255924, http://www.securityfocus.com/bid/10118
CWE: CWE-119
CVE-2004-1121
Apple Safari 1.0 through 1.2.3 allows remote attackers to spoof the URL displayed in the status bar via TABLE tags.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: safari
References: http://lists.apple.com/archives/security-announce/2004/Dec/msg00000.html, http://secunia.com/advisories/13047/, http://www.kb.cert.org/vuls/id/925430
CVE-2004-0780
Buffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via a long -S command line argument.
CVSS v2.0 Score: 7.2 (HIGH)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sunos, solaris
References: http://secunia.com/advisories/18371, http://secunia.com/advisories/19087, http://securitytracker.com/id?1015455
CVE-2004-1438
The mod_authz_svn Apache module for Subversion 1.0.4-r1 and earlier allows remote authenticated users, with write access to the repository, to read unauthorized parts of the repository via the svn copy command.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Affected Products: subversion
References: http://securityreason.com/securityalert/60, http://securitytracker.com/id?1010779, http://svn.collab.net/repos/svn/tags/1.0.6/CHANGES
CVE-2004-2390
The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when using libgadu 1.0 and later, allows attackers to cause a denial of service via unknown vectors.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: jabber_gadu-gadu_transport
References: http://secunia.com/advisories/10974/, http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429, http://www.securityfocus.com/bid/9710
CVE-2004-1227
Directory traversal vulnerability in SugarCRM Sugar Sales 2.0.1c and earlier allows remote attackers to read arbitrary files and possibly execute arbitrary PHP code via .. (dot dot) sequences in the (1) module, (2) action, or (3) theme parameters to index.php, (4) the theme parameter to Login.php, and possibly other parameters or scripts.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: sugar_sales
References: http://marc.info/?l=bugtraq&m=110295433323795&w=2, http://www.gulftech.org/?node=research&article_id=00053-120104, http://www.securityfocus.com/bid/11740
CVE-2004-1400
The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a direct request to main.asp.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: asp_calendar
References: http://marc.info/?l=bugtraq&m=110304839629822&w=2, http://www.securityfocus.com/bid/11931, https://exchange.xforce.ibmcloud.com/vulnerabilities/18474
CVE-2004-1768
The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote attackers to cause a denial of service (crash) via messages with the ISO-8859-10 character set, which is not recognized by the converters.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: brightmail_antispam
References: ftp://ftp.symantec.com/public/english_us_canada/products/sba/sba_60x/updates/p132_notes.htm, http://secunia.com/advisories/13489, http://www.kb.cert.org/vuls/id/697598
CVE-2004-1565
list.php in w-Agora 4.1.6a allows remote attackers to reveal the full path via a crafted HTTP request, possibly involving a malformed id parameter.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: w-agora
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/027040.html, http://marc.info/?l=bugtraq&m=109655691512298&w=2, http://secunia.com/advisories/12695
CVE-2004-0601
distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: distcc
References: http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS, http://secunia.com/advisories/12711/, http://www.securityfocus.com/bid/11319
CVE-2004-2156
Multiple unknown vulnerabilities in Online Recruitment Agency 1.0 have unknown impact and attack vectors.
CVSS v2.0 Score: 10.0 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected Products: online_recruitment_agency
References: http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html, http://secunia.com/advisories/12720/, http://securitytracker.com/id?1011539
CVE-2004-1679
Directory traversal vulnerability in TwinFTP 1.0.3 R2 allows remote attackers to create arbitrary files via a .../ (triple dot) in the (1) CWD, (2) STOR, or (3) RETR commands.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Affected Products: twinftp_enterprise, twinftp_standard
References: http://marc.info/?l=bugtraq&m=109509243831121&w=2, http://secunia.com/advisories/12511/, http://www.security.org.sg/vuln/twinftp103r2.html
CVE-2004-0107
The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: sysstat, propack
References: ftp://patches.sgi.com/support/free/security/advisories/20040302-01-U.asc, http://www.ciac.org/ciac/bulletins/o-097.shtml, http://www.osvdb.org/6884
CVE-2004-2163
login_radius on OpenBSD 3.2, 3.5, and possibly other versions does not verify the shared secret in a response packet from a RADIUS server, which allows remote attackers to bypass authentication by spoofing server replies.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: openbsd
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0058.html, http://secunia.com/advisories/12617, http://www.openbsd.org/errata35.html#radius
CVE-2004-1847
News Manager Lite 2.5 allows remote attackers to bypass authentication and gain administrator privileges by setting the ADMIN parameter in the NEWS_LOGIN cookie.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: news_manager_lite
References: http://marc.info/?l=bugtraq&m=107999733503496&w=2, http://secunia.com/advisories/11180, http://securitytracker.com/id?1009507
CVE-2004-0576
The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing an invalid OID.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: radius
References: http://marc.info/?l=full-disclosure&m=108785242716726&w=2, http://www.idefense.com/application/poi/display?id=110&type=vulnerabilities, https://exchange.xforce.ibmcloud.com/vulnerabilities/16466
CVE-2004-1571
AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to (1) auto-acronyms.php, (2) auto-archive.php, (3) ount-article-views.php, (4) kses.php, (5) custom-quick-tags.php, (6) disable-all-comments.php, (7) easy-date-format.php, (8) enable-disable-comments.php, (9) filter-by-author.php, (10) format-switcher.php, (11) long-to-short.php, (12) prospective-posting.php, or (13) sort-by-xfield.php, which displays the full path in an error message.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: aj-fork
References: http://echo.or.id/adv/adv07-y3dips-2004.txt, http://marc.info/?l=bugtraq&m=109664986210763&w=2, https://exchange.xforce.ibmcloud.com/vulnerabilities/17568
CVE-2004-1368
ISQL*Plus in Oracle 10g Application Server allows remote attackers to execute arbitrary files via an absolute pathname in the file parameter to the load.uix script.
CVSS v2.0 Score: 7.8 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Affected Products: collaboration_suite, enterprise_manager, e-business_suite, oracle10g, oracle8i
References: http://marc.info/?l=bugtraq&m=110382264415387&w=2, http://sunsolve.sun.com/search/document.do?assetkey=1-26-101782-1, http://www.kb.cert.org/vuls/id/435974
CVE-2004-2752
Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action.
CVSS v2.0 Score: 4.3 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Affected Products: postnuke
Related CWEs: CWE-79
Related CAPECs: CAPEC-209, CAPEC-591, CAPEC-592
References: http://securitytracker.com/id?1008629, http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html, http://www.gulftech.org/01032004.php
CWE: CWE-79
CVE-2004-1219
paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read the administrator's password hash and conduct brute force password guessing attacks by listing the contents of the sessions directory and reading the associated file for the administrator session.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: pafiledb
References: http://echo.or.id/adv/adv09-y3dips-2004.txt, http://marc.info/?l=bugtraq&m=110245123927025&w=2, http://www.securityfocus.com/bid/11818
CVE-2004-2196
Zanfi CMS lite 1.1 allows remote attackers to obtain the full path of the web server via direct requests without required arguments to (1) adm_pages.php, (2) corr_pages.php, (3) del_block.php, (4) del_page.php, (5) footer.php, (6) home.php, and others.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: zanfi_cms_lite
References: http://secunia.com/advisories/12792, http://securitytracker.com/id?1011612, http://www.osvdb.org/10677
CVE-2004-2336
Unknown vulnerability in Novell GroupWise and GroupWise WebAccess 6.0 through 6.5, when running with Apache Web Server 1.3 for NetWare where Apache is loaded using GWAPACHE.CONF, allows remote attackers to read directories and files on the server.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: groupwise, netware
References: http://secunia.com/advisories/11119, http://support.novell.com/cgi-bin/search/searchtid.cgi?/10091330.htm, http://www.securityfocus.com/bid/9864
CVE-2004-0381
mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.
CVSS v2.0 Score: 2.1 (LOW)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N
Affected Products: mysql
References: http://marc.info/?l=bugtraq&m=108023246916294&w=2, http://marc.info/?l=bugtraq&m=108206802810402&w=2, http://security.gentoo.org/glsa/glsa-200405-20.xml
CVE-2004-1893
Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Affected Products: dreamweaver_ultradev, dreamweaver
References: http://marc.info/?l=bugtraq&m=108102481929451&w=2, http://secunia.com/advisories/11284, http://www.macromedia.com/devnet/security/security_zone/mpsb04-05.html
CVE-2004-2488
Directory traversal vulnerability in Nexgen FTP Server before 2.2.3.23 allows remote authenticated users to read or list arbitrary files via "C:" sequences in the (1) RETR (get), (2) NLST (ls), (3) LIST (ls), (4) RNFR, or (5) RNTO FTP commands.
CVSS v2.0 Score: 4.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Affected Products: nexgen_ftp_server
References: http://secunia.com/advisories/11216, http://www.nexgenserver.com/cgi-bin/loadframe2.cgi?/History.html, http://www.osvdb.org/4557
CVE-2004-1269
lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while writing to passwd.new, which causes subsequent invocations of lppasswd to fail.
CVSS v2.0 Score: 5.0 (MEDIUM)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected Products: fedora_core, cups
References: http://tigger.uic.edu/~jlongs2/holes/cups2.txt, http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
CVE-2004-1398
Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument.
CVSS v2.0 Score: 4.6 (MEDIUM)
CVSS v2.0 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Products: toast
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html, http://marc.info/?l=bugtraq&m=110305083706943&w=2, http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt
CVE-2004-1638
Buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long (1) EHLO and possibly (2) HELO command.
CVSS v2.0 Score: 7.5 (HIGH)
CVSS v2.0 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products: mailcarrier
References: http://marc.info/?l=bugtraq&m=109880961630050&w=2, http://secunia.com/advisories/12999, http://www.securityfocus.com/bid/11535