deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-1741
Published: 2004-08-23
Description: Music daemon (musicd) 0.0.3 and earlier allows remote attackers to cause a denial of service (crash) by calling LOAD with a binary file as an argument, then calling SHOWLIST.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6595&w=2; http://musicdaemon.sourceforge.net/; http://securitytracker.com/id?1011025
CVE: CVE-2004-0800
Published: 2004-08-24
Description: Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv[0] value.
CVSS Score: 4.6 (MEDIUM)
References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/57627; http://www.ciac.org/ciac/bulletins/o-202.shtml; http://www.idefense.com/application/poi/display?id=132&type=vulnerabilities
CVE: CVE-2004-1742
Published: 2004-08-24
Description: Directory traversal vulnerability in WebAPP 0.9.9 allows remote attackers to view arbitrary files via a .. (dot dot) in the viewcat parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://cornerstone.web-app.org/cgi-bin/index.cgi?action=downloadinfo&cat=updates&id=1; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2879&w=2; http://secunia.com/advisories/12373
CVE: CVE-2004-1743
Published: 2004-08-24
Description: Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to view arbitrary files via an HTTP request for the disk_c virtual folder.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2863&w=2; http://secunia.com/advisories/12372; http://securitytracker.com/id?1011045
CVE: CVE-2004-1744
Published: 2004-08-24
Description: Easy File Sharing (EFS) Webserver 1.25 allows remote attackers to cause a denial of service (CPU consumption or crash) via many large HTTP requests.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2863&w=2; http://secunia.com/advisories/12372; http://securitytracker.com/id?1011045
CVE: CVE-2004-1745
Published: 2004-08-24
Description: Buffer overflow in Painkiller 1.3.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8821&w=2; http://secunia.com/advisories/12367; http://www.securityfocus.com/bid/11029
CVE: CVE-2004-1752
Published: 2004-08-24
Description: Stack-based buffer overflow in Gaucho 1.4 Build 145 allows remote attackers to execute arbitrary code via a POP3 email with a long Content-Type header.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7953&w=2; http://secunia.com/advisories/12387; http://securitytracker.com/id?1011032
CVE: CVE-2004-0819
Published: 2004-08-25
Description: The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service (crash) via an ICMP echo (ping) packet.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8824&w=2; http://openbsd.org/errata34.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/17129
CVE: CVE-2004-1662
Published: 2004-08-25
Description: YaBB SE 1.5.1 allows remote attackers to obtain sensitive information via a direct HTTP request to Admin.php, which reveals the full path in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://echo.or.id/adv/adv05-y3dips-2004.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0432&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/17267
CVE: CVE-2004-1681
Published: 2004-08-26
Description: Multiple buffer overflows in (1) phrelay-cfg, (2) phlocale, (3) pkg-installer, or (4) input-cfg in QNX Photon microGUI for QNX RTP 6.1 allow local users to gain privileges via a long -s (server) command line parameter.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7597&w=2; http://www.rfdslabs.com.br/qnx-advs-03-2004.txt; http://www.securityfocus.com/bid/11164
CVE: CVE-2004-1751
Published: 2004-08-26
Description: Ground Control II: Operation Exodus 1.0.0.7 and earlier allows remote servers to cause a denial of service (client or server crash) via a large packet, which generates a "Message too long" socket error that is treated as a critical error.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/gc2boom-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2892&w=2; http://securitytracker.com/id?1011075
CVE: CVE-2004-0820
Published: 2004-08-28
Description: Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/12381/; http://www.auscert.org.au/render.html?it=4338; http://www.frsirt.com/exploits/08252004.skinhead.php
CVE: CVE-2004-1640
Published: 2004-08-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 0.94 and 1.0 allow remote attackers to execute arbitrary web script and HTML via the (1) terme parameter to search.php or (2) letter parameter to letter.php.
CVSS Score: 4.3 (MEDIUM)
References: http://cyruxnet.org/modulo_dic_xoops.htm; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9963&w=2; http://secunia.com/advisories/12424
CVE: CVE-2004-1641
Published: 2004-08-29
Description: Heap-based buffer overflow in Titan FTP 3.21 and earlier allows remote attackers to cause a denial of service (crash) via a long FTP command such as (1) CWD, (2) STAT, or (3) LIST.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2523&w=2; http://secunia.com/advisories/12419; http://www.securityfocus.com/bid/11069
CVE: CVE-2004-1642
Published: 2004-08-29
Description: WFTPD Pro Server 3.21 allows remote authenticated users to cause a denial of service (crash) via a series of long MLIST commands.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3317&w=2; http://secunia.com/advisories/12420; http://www.securityfocus.com/bid/11067
CVE: CVE-2004-1643
Published: 2004-08-29
Description: WS_FTP 5.0.2 allows remote authenticated users to cause a denial of service (CPU consumption) via a CD command that contains an invalid path with a "../" sequence.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2888&w=2; http://secunia.com/advisories/12406; http://www.securityfocus.com/bid/11065
CVE: CVE-2004-1644
Published: 2004-08-30
Description: Xedus 1.0 allows remote attackers to cause a denial of service (refuse connections) by connecting multiple times from the same IP address.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1394&w=2; http://secunia.com/advisories/12418; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]4
CVE: CVE-2004-1645
Published: 2004-08-30
Description: Cross-site scripting (XSS) vulnerability in Xedus 1.0 allows remote attackers to execute arbitrary web script or HTML via the (1) username parameter to test.x, (2) username parameter to TestServer.x, or (3) param parameter to testgetrequest.x.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1394&w=2; http://secunia.com/advisories/12418; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]4
CVE: CVE-2004-1646
Published: 2004-08-30
Description: Directory traversal vulnerability in Xedus 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1394&w=2; http://secunia.com/advisories/12418; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]4
CVE: CVE-2004-1647
Published: 2004-08-30
Description: SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass authentication via (1) admin or Pass parameter to index_next.asp, (2) LoginId, OPass, or NPass to CPassChangePassword.asp, (3) users_edit.asp, or (4) users_add.asp.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3192&w=2; http://secunia.com/advisories/12407; http://www.criolabs.net/advisories/passprotect.txt
CVE: CVE-2004-1660
Published: 2004-08-30
Description: PHP remote file inclusion vulnerability in CuteNews 1.3.6 and earlier allows remote attackers to execute arbitrary PHP code via the cutepath parameter to (1) show_archives.php or (2) show_news.php.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/lists/bugtraq/2004/Sep/0014.html; http://secunia.com/advisories/12432; http://www.7a69ezine.org/node/view/130
CVE: CVE-2004-1648
Published: 2004-08-31
Description: Cross-site scripting (XSS) vulnerability in (1) index.asp, (2) ChangePassword.asp, (3) users_list.asp, (4) and users_add.asp in Password Protect allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3192&w=2; http://secunia.com/advisories/12407; http://www.criolabs.net/advisories/passprotect.txt
CVE: CVE-2004-1649
Published: 2004-08-31
Description: Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfo_file command line parameter.  NOTE: this issue might not cross security boundaries, so it may be REJECTED in the future.
CVSS Score: 7.2 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-August/025902.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5017&w=2; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1787&w=2
CVE: CVE-2004-1650
Published: 2004-08-31
Description: D-Link DCS-900 Internet Camera listens on UDP port 62976 for an IP address, which allows remote attackers to change the IP address of the camera via a UDP broadcast packet.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0049&w=2; http://miscname.com/public/dcs-900/; http://secunia.com/advisories/12425
CVE: CVE-2004-1651
Published: 2004-08-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in the registration page in phpScheduleIt 1.0.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Lastname fields during new user registration, or (3) the Schedule Name field.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2004-09/0216.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2709&w=2; http://securitytracker.com/id?1011127
CVE: CVE-2004-1652
Published: 2004-08-31
Description: phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2709&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/17195; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2709&w=2
CVE: CVE-2004-1653
Published: 2004-08-31
Description: The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3484&w=2; http://securitytracker.com/id?1011143; http://www.osvdb.org/9562
CVE: CVE-2004-1774
Published: 2004-08-31
Description: Buffer overflow in the SDO_CODE_SIZE procedure of the MD2 package (MDSYS.MD2.SDO_CODE_SIZE) in Oracle 10g before 10.1.0.2 Patch 2 allows local users to execute arbitrary code via a long LAYER parameter.
CVSS Score: 7.2 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/025984.html; http://www.appsecinc.com/resources/alerts/oracle/2004-0001/; http://www.frsirt.com/exploits/20050413.OracleExploit.sql.php
CVE: CVE-2004-1372
Published: 2004-09-01
Description: Multiple stack-based buffer overflows in IBM DB2 7.x and 8.1 allow local users to execute arbitrary code via (1) a long third argument to the rec2xml function or (2) a long filename argument to the generate_distfile procedure.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4162&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1065&w=2; http://www.ngssoftware.com/advisories/db223122004K.txt
CVE: CVE-2004-1654
Published: 2004-09-01
Description: SQL injection vulnerability in the calendar module in phpWebsite 0.9.3-4 and earlier allows remote attackers to execute arbitrary SQL commands via cal_template.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5513&w=2; http://secunia.com/advisories/12438; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]4
CVE: CVE-2004-1655
Published: 2004-09-01
Description: Cross-site scripting (XSS) vulnerability in phpWebsite 0.9.3-4 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) CM_pid parameter in the comments module or (2) the subject or message fields in the notes module.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5513&w=2; http://secunia.com/advisories/12438; http://securitytracker.com/id?1011120
CVE: CVE-2004-1656
Published: 2004-09-01
Description: CRLF injection vulnerability in Comersus Shopping Cart 5.0991 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the redirecturl parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5519&w=2; http://www.securityfocus.com/bid/11083; https://exchange.xforce.ibmcloud.com/vulnerabilities/17201
CVE: CVE-2004-1657
Published: 2004-09-01
Description: Cross-site scripting (XSS) vulnerability in the Activity and Events Viewer for Newtelligence DasBlog allows remote attackers to inject arbitrary web script or HTML via the (1) User Agent or (2) Referrer HTTP headers.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0050&w=2; http://secunia.com/advisories/12416; http://staff.newtelligence.net/clemensv/PermaLink.aspx?guid=69bce168-cb09-4f09-8d53-f0b97f11b198
CVE: CVE-2004-0637
Published: 2004-09-02
Description: Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/12409/; http://www.idefense.com/application/poi/display?id=136&type=vulnerabilities&flashstatus=true; http://www.kb.cert.org/vuls/id/316206
CVE: CVE-2004-1658
Published: 2004-09-02
Description: Kerio Personal Firewall 4.0 (KPF4) allows local users with administrative privileges to bypass the Application Security feature and execute arbitrary processes by directly writing to \device\physicalmemory to restore the running kernel's SDT ServiceTable.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1039&w=2; http://secunia.com/advisories/12468/; http://www.security.org.sg/vuln/kerio4016.html
CVE: CVE-2004-1659
Published: 2004-09-02
Description: Cross-site scripting (XSS) vulnerability in index.php in CuteNews 1.3.6 and earlier allows remote attackers with Administrator, Editor, Journalist or Commenter privileges to inject arbitrary web script or HTML via the mod parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1881&w=2; http://secunia.com/advisories/12432; http://www.securityfocus.com/bid/11097
CVE: CVE-2004-1661
Published: 2004-09-02
Description: MailWorks Professional allows remote attackers to bypass authentication and gain privileges via a cookie that contains "auth=1" and "uId=1."
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0447&w=2; http://secunia.com/advisories/12458; http://www.securityfocus.com/bid/11095
CVE: CVE-2004-1663
Published: 2004-09-04
Description: Engenio/LSI Logic storage controllers, as used in products such as Storagetek D280, and IBM DS4100 (formerly FastT 100) and Brocade SilkWorm Switches, allow remote attackers to cause a denial of service (freeze and possible data corruption) via crafted TCP packets.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1484&w=2; http://secunia.com/advisories/12464; http://www.securityfocus.com/bid/11108
CVE: CVE-2004-1664
Published: 2004-09-05
Description: Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not properly handled by the buffer overflow protection mechanism. NOTE: this issue might overlap CVE-2005-0430.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0587&w=2; http://www.securityfocus.com/bid/11119; https://exchange.xforce.ibmcloud.com/vulnerabilities/17286
CVE: CVE-2004-1665
Published: 2004-09-05
Description: Cross-site scripting (XSS) vulnerability in index.php in PsNews 1.1 allows remote attackers to inject arbitrary web script or HTML via the no parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4494&w=2; http://securitytracker.com/id?1011191; http://www.securityfocus.com/bid/11124
CVE: CVE-2004-1348
Published: 2004-09-06
Description: Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service (process crash).
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/12470/; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57614-1; http://www.auscert.org.au/render.html?it=4369
CVE: CVE-2004-0822
Published: 2004-09-07
Description: Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/12491/; http://www.ciac.org/ciac/bulletins/o-212.shtml; http://www.kb.cert.org/vuls/id/545446
CVE: CVE-2004-0823
Published: 2004-09-07
Description: OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/12491/; http://secunia.com/advisories/17233; http://secunia.com/advisories/21520
CVE: CVE-2004-0851
Published: 2004-09-08
Description: The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 2.1 (LOW)
References: http://exorsus.net/projects/net-acct/net-acct-notempfiles.patch; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2385&w=2; http://secunia.com/advisories/12476
CVE: CVE-2004-0830
Published: 2004-09-09
Description: The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 and earlier, and F-Secure Internet Gatekeeper 6.32 and earlier allow remote attackers to cause a denial of service (service crash due to unhandled exception) via a certain malformed packet.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5698&w=2; http://www.f-secure.com/security/fsc-2004-2.shtml; http://www.idefense.com/application/poi/display?id=137&type=vulnerabilities
CVE: CVE-2004-1667
Published: 2004-09-09
Description: Off-by-one error in Halo Combat Evolved 1.04 and earlier allows remote attackers to cause a denial of service (server crash) via a long client response.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/haloboom-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2024&w=2; http://secunia.com/advisories/12504
CVE: CVE-2004-1668
Published: 2004-09-10
Description: Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1955&w=2; http://secunia.com/advisories/12497; http://www.securityfocus.com/bid/11148
CVE: CVE-2004-1669
Published: 2004-09-10
Description: Cross-site scripting (XSS) vulnerability in MERAK Mail Server 7.4.5 with Icewarp Web Mail 5.2.7 and possibly other versions allows remote attackers to execute arbitrary web script or HTML via the (1) User name parameter to accountsettings.html or (2) Search string parameter to search.html.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0067&w=2; http://secunia.com/advisories/12789; http://www.securityfocus.com/bid/11371
CVE: CVE-2004-1670
Published: 2004-09-10
Description: Multiple directory traversal vulnerabilities Merak Mail Server 7.4.5 with Icewarp Web Mail 5.2.7, and possibly other versions, allow remote attackers to (1) create arbitrary directories via a .. (dot dot) in the user parameter to viewaction.html or (2) rename arbitrary files via a ....// (doubled dot dot) in the folderold or folder parameters to folders.html.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0067&w=2; http://secunia.com/advisories/12789; http://www.securityfocus.com/bid/11371
CVE: CVE-2004-1675
Published: 2004-09-11
Description: Serv-U FTP server 4.x and 5.x allows remote attackers to cause a denial of service (application crash) via a STORE UNIQUE (STOU) command with an MS-DOS device name argument such as (1) COM1, (2) LPT1, (3) PRN, or (4) AUX.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1638&w=2; http://secunia.com/advisories/12507/; http://www.securityfocus.com/bid/11155
CVE: CVE-2004-1676
Published: 2004-09-12
Description: Heap-based buffer overflow in the image sending feature in Gadu-Gadu 6.0 build 149 allows remote attackers to execute arbitrary code via a crafted GG_MSG_IMAGE_REPLY message.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0733&w=2; http://secunia.com/advisories/12510; http://www.securityfocus.com/bid/11158
CVE: CVE-2004-1677
Published: 2004-09-12
Description: pdesk.cgi in PerlDesk allows remote attackers to gain sensitive information via an invalid lang parameter, which includes pathname information in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6554&w=2; http://secunia.com/advisories/12512; https://exchange.xforce.ibmcloud.com/vulnerabilities/17343
CVE: CVE-2004-0807
Published: 2004-09-13
Description: Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20041201-01-P; http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000873; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0495&w=2
CVE: CVE-2004-0838
Published: 2004-09-13
Description: Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/12522; http://www.atstake.com/research/advisories/2004/a091304-1.txt; http://www.securityfocus.com/bid/11162
CVE: CVE-2004-1678
Published: 2004-09-13
Description: Directory traversal vulnerability in pdesk.cgi in PerlDesk allows remote attackers to read portions of arbitrary files and possibly execute arbitrary Perl modules via ".." sequences terminated by a %00 (null) character in the lang parameter, which can leak portions of the requested files if a compilation error message occurs.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6554&w=2; http://secunia.com/advisories/12512; http://www.securityfocus.com/bid/11160