deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-0430
Published: 2004-07-07
Description: Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/mhonarc/security-announce/msg00049.html; http://secunia.com/advisories/11539; http://securitytracker.com/id?1010039
CVE: CVE-2004-0431
Published: 2004-07-07
Description: Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.apple.com/mhonarc/security-announce/msg00048.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8389&w=2; http://marc.info/?l=ntbugtraq&m=[PII_REDACTED]3237&w=2
CVE: CVE-2004-0434
Published: 2004-07-07
Description: k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-131
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-04:09.kadmind.asc; http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/020998.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6457&w=2
CVE: CVE-2004-0437
Published: 2004-07-07
Description: Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service (crash) by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q2/0025.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3596&w=2; http://www.securiteam.com/windowsntfocus/5RP0215CUU.html
CVE: CVE-2004-0444
Published: 2004-07-07
Description: Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021360.html; http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021361.html; http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021362.html
CVE: CVE-2004-0445
Published: 2004-07-07
Description: The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.
CVSS Score: 2.6 (LOW)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021359.html; http://secunia.com/advisories/11066; http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html
CVE: CVE-2004-0459
Published: 2004-07-07
Description: The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka "jabber"), which prevents devices from transmitting data.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0631.html; http://securitytracker.com/id?1010152; http://support.avaya.com/elmodocs2/security/ASA-2004-009.pdf
CVE: CVE-2004-0469
Published: 2004-07-07
Description: Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.
CVSS Score: 10.0 (HIGH)
References: http://www.checkpoint.com/techsupport/alerts/ike_vpn.html; http://www.securityfocus.com/bid/10273; https://exchange.xforce.ibmcloud.com/vulnerabilities/16060
CVE: CVE-2004-0470
Published: 2004-07-07
Description: BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_59.00.jsp; http://secunia.com/advisories/11593; http://securitytracker.com/id?1010128
CVE: CVE-2004-0471
Published: 2004-07-07
Description: BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).
CVSS Score: 2.1 (LOW)
References: http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp; http://secunia.com/advisories/11594; http://securitytracker.com/id?1010129
CVE: CVE-2004-0472
Published: 2004-07-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate is a reservation duplicate of CVE-2004-0434.  Notes: All CVE users should reference CVE-2004-0434 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2004-0473
Published: 2004-07-07
Description: Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.
CVSS Score: 2.6 (LOW)
CWE: CWE-88
References: http://security.gentoo.org/glsa/glsa-200405-19.xml; http://securitytracker.com/id?1010142; http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities
CVE: CVE-2004-0474
Published: 2004-07-07
Description: Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL.  NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.
CVSS Score: 5.1 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0440.html; http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0450.html; http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0688.html
CVE: CVE-2004-0475
Published: 2004-07-07
Description: The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm.  NOTE: this bug may overlap CVE-2003-1041.
CVSS Score: 5.1 (MEDIUM)
References: http://www.securityfocus.com/archive/1/363202; http://www.securityfocus.com/bid/10348; https://exchange.xforce.ibmcloud.com/vulnerabilities/16147
CVE: CVE-2004-0478
Published: 2004-07-07
Description: Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop  that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.
CVSS Score: 2.6 (LOW)
CWE: CWE-399
References: http://bugzilla.mozilla.org/show_bug.cgi?id=243540; http://lists.immunitysec.com/pipermail/dailydave/2004-May/000587.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/16225
CVE: CVE-2004-0479
Published: 2004-07-07
Description: Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021500.html; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]2310&w=2; http://marc.info/?l=vuln-dev&m=[PII_REDACTED]9070&w=2
CVE: CVE-2004-0482
Published: 2004-07-07
Description: Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch; ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6420&w=2
CVE: CVE-2004-0483
Published: 2004-07-07
Description: Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20040503-01-P; http://secunia.com/advisories/11628; http://securitytracker.com/id?1010185
CVE: CVE-2004-0484
Published: 2004-07-07
Description: mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a null dereference.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2590&w=2; http://www.securityfocus.com/bid/10382; https://exchange.xforce.ibmcloud.com/vulnerabilities/16189
CVE: CVE-2004-0485
Published: 2004-07-07
Description: The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.
CVSS Score: 5.0 (MEDIUM)
References: http://fundisom.com/owned/warning; http://lists.apple.com/mhonarc/security-announce/msg00053.html; http://lists.seifried.org/pipermail/security/2004-May/003743.html
CVE: CVE-2004-0486
Published: 2004-07-07
Description: HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.
CVSS Score: 7.6 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0837.html; http://lists.apple.com/mhonarc/security-announce/msg00053.html; http://secunia.com/advisories/11622/
CVE: CVE-2004-0488
Published: 2004-07-07
Description: Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: ftp://patches.sgi.com/support/free/security/advisories/20040605-01-U.asc; http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021610.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3750&w=2
CVE: CVE-2004-0489
Published: 2004-07-07
Description: Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option.
CVSS Score: 7.6 (HIGH)
CWE: CWE-88
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-May/021871.html; http://www.insecure.ws/article.php?story=[PII_REDACTED]51133; https://exchange.xforce.ibmcloud.com/vulnerabilities/16242
CVE: CVE-2004-2055
Published: 2004-07-19
Description: Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbitrary HTMl or web script via the search_author parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2723&w=2; http://secunia.com/advisories/12114; http://www.securityfocus.com/bid/10753
CVE: CVE-2004-1749
Published: 2004-07-22
Description: Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6318&w=2; http://secunia.com/advisories/12390; http://www.securityfocus.com/bid/11049
CVE: CVE-2004-2047
Published: 2004-07-23
Description: Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbitrary files via a .. (dot dot) in the pathext parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5241&w=2; http://secunia.com/advisories/12151; http://www.cirt.net/advisories/ew_file_manager.shtml
CVE: CVE-2004-2051
Published: 2004-07-24
Description: The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a file:/// URL.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1021&w=2; http://secunia.com/advisories/12154; http://securitytracker.com/id?1010770
CVE: CVE-2004-2053
Published: 2004-07-24
Description: PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the site parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2694&w=2; http://securitytracker.com/id?1010769; http://www.osvdb.org/8233
CVE: CVE-2003-1048
Published: 2004-07-27
Description: Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009445.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009473.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-September/009506.html
CVE: CVE-2004-0566
Published: 2004-07-27
Description: Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0806.html; http://www.kb.cert.org/vuls/id/266926; http://www.us-cert.gov/cas/techalerts/TA04-212A.html
CVE: CVE-2004-0594
Published: 2004-07-27
Description: The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-367
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847; http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023908.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9154&w=2
CVE: CVE-2004-0595
Published: 2004-07-27
Description: The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.
CVSS Score: 6.8 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000847; http://lists.grok.org.uk/pipermail/full-disclosure/2004-July/023909.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9154&w=2
CVE: CVE-2004-0600
Published: 2004-07-27
Description: Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.
CVSS Score: 10.0 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0458&w=2
CVE: CVE-2004-0632
Published: 2004-07-27
Description: Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://www.adobe.com/support/techdocs/330527.html; http://www.adobe.com/support/techdocs/34222.htm; http://www.idefense.com/application/poi/display?id=116&type=vulnerabilities
CVE: CVE-2004-0686
Published: 2004-07-27
Description: Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000851; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000854; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0458&w=2
CVE: CVE-2004-0695
Published: 2004-07-27
Description: Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt; http://www.atstake.com/research/advisories/2004/a071304-1.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/16686
CVE: CVE-2004-0696
Published: 2004-07-27
Description: The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt; http://www.atstake.com/research/advisories/2004/a071304-1.txt; http://www.securityfocus.com/bid/10721
CVE: CVE-2004-0697
Published: 2004-07-27
Description: Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt; http://www.atstake.com/research/advisories/2004/a071304-1.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/16688
CVE: CVE-2004-0698
Published: 2004-07-27
Description: 4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.
CVSS Score: 3.6 (LOW)
References: ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt; http://www.atstake.com/research/advisories/2004/a071304-1.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/16689
CVE: CVE-2004-0700
Published: 2004-07-27
Description: Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.
CVSS Score: 7.5 (HIGH)
References: http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000857; http://marc.info/?l=apache-modssl&m=[PII_REDACTED]6749&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5991&w=2
CVE: CVE-2004-0701
Published: 2004-07-27
Description: Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.
CVSS Score: 4.6 (MEDIUM)
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F53922; http://www.kb.cert.org/vuls/id/100780; http://www.securityfocus.com/bid/7457
CVE: CVE-2004-0702
Published: 2004-07-27
Description: DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3639&w=2; http://www.securityfocus.com/bid/10698; https://exchange.xforce.ibmcloud.com/vulnerabilities/16673
CVE: CVE-2004-0703
Published: 2004-07-27
Description: Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3639&w=2; http://www.securityfocus.com/bid/10698; https://exchange.xforce.ibmcloud.com/vulnerabilities/16672
CVE: CVE-2004-0704
Published: 2004-07-27
Description: Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3639&w=2; http://www.securityfocus.com/bid/10698; https://exchange.xforce.ibmcloud.com/vulnerabilities/16671
CVE: CVE-2004-0705
Published: 2004-07-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=235265; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3639&w=2; http://www.securityfocus.com/bid/10698
CVE: CVE-2004-0706
Published: 2004-07-27
Description: Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.
CVSS Score: 2.1 (LOW)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=235510; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3639&w=2; http://www.securityfocus.com/bid/10698
CVE: CVE-2004-0707
Published: 2004-07-27
Description: SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.
CVSS Score: 7.5 (HIGH)
References: http://bugzilla.mozilla.org/show_bug.cgi?id=244272; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3639&w=2; http://www.securityfocus.com/bid/10698