Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2004-2577 State: PUBLISHED Published: 2005-11-28T23:00:00Z Last Updated: 2024-09-16T20:47:26.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The acl_check function in phpGroupWare 0.9.16RC2 always returns True, even when mkdir does not behave as expected, which could allow remote attackers to obtain sensitive information via WebDAV from users' home directories that lack .htaccess files, and possibly has other unknown impacts. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/7618 - http://www.securityfocus.com/bid/12237 - https://savannah.gnu.org/bugs/?func=detailitem&item_id=7227
CVE ID: CVE-2004-2578 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpGroupWare before 0.9.16.002 transmits the (1) header admin and (2) setup passwords in plaintext via cookies, which allows remote attackers to sniff passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/10895 - http://www.osvdb.org/8354 - http://web.archive.org/web/20040920024328/http://www.phpgroupware.org/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/16970
CVE ID: CVE-2004-2579 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: ACLCHECK module in Novell iChain 2.3 allows attackers to bypass access control rules of an unspecified component via an unspecified attack vector involving a string that contains escape sequences represented with "overlong UTF-8 encoding." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011074 - http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm - http://www.osvdb.org/9266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17132 - http://www.securityfocus.com/
- http://www.osvdb.org/9266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17132 - http://www.securityfocus.com/bid/11061 - http://secunia.com/advisories/12366
CVE ID: CVE-2004-2580 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Novell iChain 2.3 allows remote attackers to obtain login credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1011074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17133 - http://www.osvdb.org/9267 - http://www.securityfocus.com/bid/11061 - http://secunia.com/advisories/12366
CVE ID: CVE-2004-2581 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell iChain 2.3 allows attackers to cause a denial of service via a URL with a "specific string." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/9268 - http://securitytracker.com/id?1011074 - http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/17134 - http://www.securityfocus.com/bid/11061 - http://secunia.com/advisories/12366
CVE ID: CVE-2004-2582 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell iChain 2.3 includes the build number in the VIA line of the proxy server's HTTP headers, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17135 - http://securitytracker.com/id?1011074 - http://support.novell.com/cgi-bin/search/searchtid.cgi?2972080.htm - http://www.securityfocus.com/bid/11061 - http://secunia.com/advisories/12366 - http://www.osvdb.org/9269
CVE ID: CVE-2004-2583 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: SMTP service in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous open connections to TCP port 25. Additional Analyst Notes: - CVE Program Container: References: - http://www.zone-h.org/advisories/read/id=4098 - http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt - http://secunia.com/advisories/11042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15391
CVE ID: CVE-2004-2584 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: frmAddfolder.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote authenticated users to create a folder that SmarterMail cannot delete or rename via a folder name with a null byte ("%00"). NOTE: it is not clear whether this issue poses a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15392 - http://www.zone-h.org/advisories/read/id=4098 - http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt
CVE ID: CVE-2004-2585 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in frmCompose.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to inject arbitrary web script or HTML via Javascript to the "check spelling" feature in the compose area. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/9805 - http://www.zone-h.org/advisories/read/id=4098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15393 - http://www.osvdb.org/4145 - http://members.lycos.co.uk/r34ct/main/smarter_mai
force.ibmcloud.com/vulnerabilities/15393 - http://www.osvdb.org/4145 - http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt - http://securitytracker.com/id?1009307 - http://secunia.com/advisories/11042
CVE ID: CVE-2004-2586 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in frmGetAttachment.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to read arbitrary files via the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/15389 - http://www.zone-h.org/advisories/read/id=4098 - http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt - http://securitytracker.com/id?1009307 - http://secunia.com/advisories/11042
CVE ID: CVE-2004-2587 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.zone-h.org/advisories/read/id=4098 - http://members.lycos.co.uk/r34ct/main/smarter_mail%203.1/smarter_mail.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/15390 - http://secunia.com/advisories/11042
CVE ID: CVE-2004-2588 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intentional information leak in phpinfo.php in XMB (aka extreme message board) 1.9 beta (aka Nexus beta) allows remote attackers to obtain sensitive information such as the configuration of the web server and the PHP application. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=108032355905265&w=2 - http://www.osvdb.org/4643 - http://securitytracker.com/id?1009561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15656 - http://www.securityfocus.com/bid/9983 - http://archives.
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15656 - http://www.securityfocus.com/bid/9983 - http://archives.neohapsis.com/archives/bugtraq/2004-03/0265.html - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2004-2589 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gaim before 0.82 allows remote servers to cause a denial of service (application crash) via a long HTTP Content-Length header, which causes Gaim to abort when attempting to allocate memory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17150 - http://www.osvdb.org/9264 - http://securitytracker.com/id?1011083 - http://gaim.sourceforge.net/security/?id=6 - http://www.securityfocus.com/bid/11056 - http://secunia.com/advisories/12383
CVE ID: CVE-2004-2590 State: PUBLISHED Published: 2005-11-28T23:00:00 Last Updated: 2024-08-08T01:29:14.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, related to regular expressions. Additional Analyst Notes: - CVE Program Container: References: - http://prdownloads.sourceforge.net/cphplib/cphplib-0.47.tar.gz?download - http://www.securityfocus.com/bid/11062 - http://securitytracker.com/id?1011076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17145 - http://www.osvdb.org/9224 - http://www.meindlsoft.com/cphplib_changelog.php
CVE ID: CVE-2004-2591 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:29:14.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: The data-overwrite capability of ButtUglySoftware CleanCache 2.19 does not properly overwrite data in files, which allows attackers to recover the data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12117 - http://www.osvdb.org/12595 - http://secunia.com/advisories/13630 - http://securitytracker.com/id?1012701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18692 - http://archives.neohapsis.com/archives/bugtraq/2004-12/0418.html
CVE ID: CVE-2004-2592 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:29:14.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a modified client that asks the server to send data stored at a negative array offset, which is not handled when processing Configstrings and Baselines. Additional Analyst Notes: - CVE Program Container: References: - http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.securityfocus.com/bid/11551 - http://www.osvdb.org/11181 -
ff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.securityfocus.com/bid/11551 - http://www.osvdb.org/11181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17890 - http://secunia.com/advisories/13013 - http://secur1ty.net/advisories/001 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
CVE ID: CVE-2004-2593 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:29:14.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a packet with a long cmd_args buffer. Additional Analyst Notes: - CVE Program Container: References: - http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17891 - http://www.securityfocus.com/bid/11551 - http://www
11979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17891 - http://www.securityfocus.com/bid/11551 - http://www.osvdb.org/11182 - http://secunia.com/advisories/13013 - http://secur1ty.net/advisories/001 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
CVE ID: CVE-2004-2594 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:29:14.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a pathname argument, as demonstrated by "download \/server.cfg". Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/11183 - http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.securityfocus.com/bid/11551 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ritytracker.com/id?1011979 - http://www.securityfocus.com/bid/11551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17892 - http://secunia.com/advisories/13013 - http://secur1ty.net/advisories/001 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
CVE ID: CVE-2004-2595 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:29:14.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a download command with a full pathname for a directory in the argument, which causes the server to crash when it cannot read data. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/11184 - http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.
http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.securityfocus.com/bid/11551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17893 - http://secunia.com/advisories/13013 - http://secur1ty.net/advisories/001 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
CVE ID: CVE-2004-2596 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:29:14.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP address. Additional Analyst Notes: - CVE Program Container: References: - http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.securityfocus.com/bid/11551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17894 - http://secunia.com/advisories/13013 - http://secur1
11551 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17894 - http://secunia.com/advisories/13013 - http://secur1ty.net/advisories/001 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
CVE ID: CVE-2004-2597 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:29:14.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's ability to find the client's IP address. Additional Analyst Notes: - CVE Program Container: References: - http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.securityfo
.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.securityfocus.com/bid/11551 - http://www.osvdb.org/11186 - http://secunia.com/advisories/13013 - http://secur1ty.net/advisories/001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/17895 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
CVE ID: CVE-2004-2598 State: PUBLISHED Published: 2005-11-29T02:00:00Z Last Updated: 2024-09-16T19:55:57.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session without a valid disconnect command, then reconnecting, which prevents a mod from being notified of changes in the client state. NOTE: the impact of this issue will vary depending on which mod is being used. Additional Analyst Notes: - CVE Program Container: References: - http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011
r: References: - http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.securityfocus.com/bid/11551 - http://secur1ty.net/advisories/001 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
CVE ID: CVE-2004-2599 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:29:14.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service (application crash) via the server console or rcon. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17898 - http://web.archive.org/web/20041130092749/www.r1ch.net/stuff/r1q2/ - http://securitytracker.com/id?1011979 - http://www.osvdb.org/11188 - http://secur1ty.net/advisories/001 - http://archives.neohapsis.com/archives/bugtr
1011979 - http://www.osvdb.org/11188 - http://secur1ty.net/advisories/001 - http://archives.neohapsis.com/archives/bugtraq/2004-10/0299.html
CVE ID: CVE-2004-2600 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:29:14.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firmware for Intelligent Platform Management Interface (IPMI) 1.5-based Intel Server Boards and Platforms is shipped with an Authentication Type Enables parameter set to an invalid None parameter, which allows remote attackers to obtain sensitive information when LAN management functionality is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://support.intel.com/support/motherboards/server/sb/CS-010422.htm - http://www.osvdb.org/4978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15775
rboards/server/sb/CS-010422.htm - http://www.osvdb.org/4978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15775 - http://www.securityfocus.com/bid/10068 - ftp://download.intel.com/support/motherboards/server/sb/aa6791invalidlanconfiguration040504.pdf - http://secunia.com/advisories/11315
CVE ID: CVE-2004-2601 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:36:24.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) allows remote attackers to read local files and possibly execute PHP code via a URL in the SKIN_inner parameter to inc/skin.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1012685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18695 - http://www.gulftech.org/?node=research&article_id=00058-12242004 - http://www.osvdb.org/12631 - http://secunia.com/advisories/13652
CVE ID: CVE-2004-2602 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:36:24.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in UberTec Help Center Live (HCL) before 1.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the HCL_path parameter to pipe.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12105 - http://securitytracker.com/id?1012685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18694 - http://www.osvdb.org/12598 - http://www.gulftech.org/?node=research&article_id=00058-12242004 - http://www.ubertec.co.uk/forums/showthr
b.org/12598 - http://www.gulftech.org/?node=research&article_id=00058-12242004 - http://www.ubertec.co.uk/forums/showthread/php?t=2376 - http://secunia.com/advisories/13652
CVE ID: CVE-2004-2603 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:36:24.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Search module in UberTec Help Center Live (HCL) allows remote attackers to inject arbitrary web script or HTML via the find parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12105 - http://securitytracker.com/id?1012685 - http://www.gulftech.org/?node=research&article_id=00058-12242004 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18696 - http://secunia.com/advisories/13652 - http://www.osvdb.org/125
ps://exchange.xforce.ibmcloud.com/vulnerabilities/18696 - http://secunia.com/advisories/13652 - http://www.osvdb.org/12597
CVE ID: CVE-2004-2604 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:36:24.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PHProxy allows remote attackers to inject arbitrary web script or HTML via the error parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/12115 - http://www.osvdb.org/12627 - http://securitytracker.com/id?1012702 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18697
CVE ID: CVE-2004-2605 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:36:25.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files. Additional Analyst Notes: - CVE Program Container: References: - http://shellcode.org/pipermail/debian-audit/2004-December/000078.html - http://secunia.com/advisories/13679 - http://www.securityfocus.com/bid/12128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/18698 - http://www.osvdb.org/12632 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=287604
CVE ID: CVE-2004-2606 State: PUBLISHED Published: 2005-11-29T02:00:00 Last Updated: 2024-08-08T01:36:24.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip - http://www.nwfusion.com/news/2004/0607confuse.html - http://www.securityfocus.com/archive/1/365175 - http://secunia.com/advisories/11754 - http://archive
/0607confuse.html - http://www.securityfocus.com/archive/1/365175 - http://secunia.com/advisories/11754 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html - http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html - http://www.securityfocus.com/archive/1/365227/30/0/threaded - http://www.osvdb.org/6577 - http://www.securityfocus.com/bid/10441 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html - http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/16274 - http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html