deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2004-2358
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in admin_words.php for phpBB 2.0.6c allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2004-03/0219.html; http://www.securityfocus.com/bid/9896; https://exchange.xforce.ibmcloud.com/vulnerabilities/15579
CVE: CVE-2004-2359
Published: 2004-12-31
Description: Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0042.html; http://secunia.com/advisories/10949; http://securitytracker.com/id?1009174
CVE: CVE-2004-2360
Published: 2004-12-31
Description: Targem Battle Mages 1.0 allows remote attackers to cause a denial of service (infinite loop) via a UDP packet with incomplete data, which causes the server to enter an infinite loop while waiting to read the rest of the data that is not sent.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/battlemages-adv.txt; http://cert.uni-stuttgart.de/archive/bugtraq/2004/03/msg00103.html; http://www.securityfocus.com/bid/9849
CVE: CVE-2004-2361
Published: 2004-12-31
Description: Digital Reality game engine, as used in Haegemonia 1.0 through 1.0.7 and Desert Rats vs. Afrika Korps 1.0, allows remote attackers to cause a denial of service (crash) via a chat message with a large message size, which triggers an out-of-bounds read.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/hgmcrash-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1414&w=2; http://www.osvdb.org/10631
CVE: CVE-2004-2362
Published: 2004-12-31
Description: PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/11554; http://securitytracker.com/id?1010061; http://www.osvdb.org/5906
CVE: CVE-2004-2363
Published: 2004-12-31
Description: Validate-Before-Canonicalize vulnerability in the checkURI function in functions.inc.php in PHPX 3.0 through 3.2.6 allows remote attackers to conduct cross-site scripting (XSS) attacks via hex-encoded tags, which bypass the check for literal "<", ">", "(", and ")" characters, as demonstrated using the limit parameter to forums.php and a variety of other vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.phpx.org/project.php?action=view&project_id=1; http://www.securityfocus.com/archive/1/362230; http://www.securityfocus.com/bid/10283
CVE: CVE-2004-2364
Published: 2004-12-31
Description: Cross-site request forgery (CSRF) vulnerability in PHPX 3.0 through 3.2.6 allows remote attackers to execute arbitrary commands via URLs that are automatically executed on behalf of the administrator, as demonstrated using (1) admin/page.php, (2) admin/news.php, (3) admin/user.php, (4) admin/images.php, (5) admin/page.php, or (6) admin/forums.php.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/11554; http://securitytracker.com/id?1010061; http://www.osvdb.org/5907
CVE: CVE-2004-2365
Published: 2004-12-31
Description: Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2004-02/0119.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/15057; http://archives.neohapsis.com/archives/bugtraq/2004-02/0119.html
CVE: CVE-2004-2366
Published: 2004-12-31
Description: Buffer overflow in GlobalSCAPE Secure FTP Server 2.0 B03.11.2004.2 allows remote attackers to cause a denial of service (crash) via a SITE command with a long argument.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/11159/; http://www.cuteftp.com/gsftps/history.asp; http://www.securiteam.com/windowsntfocus/5KP0C20CAC.html
CVE: CVE-2004-2367
Published: 2004-12-31
Description: The Control Panel applet in WFTPD and WFTPD Pro 3.21 R1 and R2 allows remote authenticated users to cause a denial of service (crash) via a long FTP command.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/11160/; http://www.securiteam.com/windowsntfocus/5JP0B20CAY.html; http://www.securityfocus.com/bid/9908
CVE: CVE-2004-2368
Published: 2004-12-31
Description: PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.opt-x.org/index.php; http://www.securityfocus.com/bid/9732; http://www.zone-h.org/en/advisories/read/id=4036/
CVE: CVE-2004-2369
Published: 2004-12-31
Description: Directory traversal vulnerability in webadmin.nsf for Lotus Domino R6 6.5.1 allows attackers to create and detect directories via a .. (dot dot) in the directory creation command.
CVSS Score: 6.4 (MEDIUM)
References: http://members.lycos.co.uk/r34ct/main/ibm_lotus_domino/lotus.txt; http://secunia.com/advisories/11143/; http://www.securityfocus.com/bid/9900
CVE: CVE-2004-2370
Published: 2004-12-31
Description: Stack-based buffer overflow in Trillian 0.71 through 0.74f and Trillian Pro 1.0 through 2.01 allows remote attackers to execute arbitrary code via a Yahoo Messenger packet with a long key name.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017766.html; http://secunia.com/advisories/10973/; http://security.e-matters.de/advisories/022004.html
CVE: CVE-2004-2371
Published: 2004-12-31
Description: Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/grboom-adv.txt; http://www.securityfocus.com/archive/1/355051; http://www.securityfocus.com/bid/9738
CVE: CVE-2004-2372
Published: 2004-12-31
Description: Buffer overflow in Bochs before 2.1.1, if installed setuid, allows local users to execute arbitrary code via a long HOME environment variable, which is used if the .bochsrc, bochsrc, and bochsrc.txt cannot be found in a known path.  NOTE: some external documents recommend that Bochs be installed setuid root, so this should be treated as a vulnerability.
CVSS Score: 7.2 (HIGH)
References: http://securitytracker.com/id?1009219; http://sourceforge.net/project/shownotes.php?release_id=215733; http://www.securiteam.com/unixfocus/5XP0L1FC0M.html
CVE: CVE-2004-2373
Published: 2004-12-31
Description: The Buddy icon file for AOL Instant Messenger (AIM) 4.3 through 5.5 is created in a predictable location, which may allow remote attackers to use a shell: URI to exploit other vulnerabilities that involve predictable locations.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/354448; http://www.securityfocus.com/bid/9698; https://exchange.xforce.ibmcloud.com/vulnerabilities/15310
CVE: CVE-2004-2374
Published: 2004-12-31
Description: BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the resulting HTML.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/355109; http://www.securityfocus.com/bid/9737; https://exchange.xforce.ibmcloud.com/vulnerabilities/15311
CVE: CVE-2004-2375
Published: 2004-12-31
Description: Buffer overflow in the POP3 server in 1st Class Mail Server 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an APOP USER command with a long second parameter (digest).
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/11029; http://securitytracker.com/id?1009279; http://www.digiti.be/jeffosz/advisories/1stclasspop3.txt
CVE: CVE-2004-2376
Published: 2004-12-31
Description: Buffer overflow in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request with a long attfile attribute.
CVSS Score: 7.5 (HIGH)
References: http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt; http://www.securitytracker.com/alerts/2004/Mar/1009443.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/15515
CVE: CVE-2004-2377
Published: 2004-12-31
Description: Alcatel OmniSwitch 7000 and 7800 allows remote attackers to cause a denial of service (reboot) via certain network scans, as demonstrated using a Nessus port scan of ports 1 through 1024 with safe-checks disabled.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10981; http://securitytracker.com/id?1009211; http://www.osvdb.org/4064
CVE: CVE-2004-2378
Published: 2004-12-31
Description: @Mail 3.64 for Windows allows remote attackers to cause a denial of service ("unusable" server) via a large number of POP3 connections to the server.
CVSS Score: 5.0 (MEDIUM)
References: http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt; http://secunia.com/advisories/10978; http://www.osvdb.org/4068
CVE: CVE-2004-2379
Published: 2004-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in @Mail 3.64 for Windows allow remote attackers to inject arbitrary web script or HTML via (1) the Displayed Name attribute in util.pl and (2) the Folder attribute in showmail.pl.
CVSS Score: 4.3 (MEDIUM)
References: http://members.lycos.co.uk/r34ct/main/%40mail_3.64/%40mail_3.64.txt; http://secunia.com/advisories/10978; http://www.osvdb.org/4066
CVE: CVE-2004-2380
Published: 2004-12-31
Description: Directory traversal vulnerability in postfile.exe for Twilight Utilities Web Server 2.0.0.0 allows remote attackers to write arbitrary files via a .. (dot dot) in the attfile parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://members.lycos.co.uk/r34ct/main/TW-webserver/TWwebserver.txt; http://www.securitytracker.com/alerts/2004/Mar/1009443.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/15523
CVE: CVE-2004-2381
Published: 2004-12-31
Description: HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
CVSS Score: 5.0 (MEDIUM)
References: http://cvs.sourceforge.net/viewcvs.py/jetty/Jetty/src/org/mortbay/http/HttpRequest.java?r1=1.75&r2=1.76; http://secunia.com/advisories/11166/; http://sourceforge.net/project/shownotes.php?release_id=224743
CVE: CVE-2004-2382
Published: 2004-12-31
Description: The PerfectNav plugin for Microsoft Internet Explorer allows remote attackers to cause a denial of service (browser crash) via a malformed URL such as "?".
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/017830.html; http://securetarget.net/advisory.htm; http://securitytracker.com/id?1009218
CVE: CVE-2004-2383
Published: 2004-12-31
Description: Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain focus.  NOTE: the discloser claimed that the vendor does not categorize this as a vulnerability, but it can be used in a spoofing scenario; the discloser provides alternate scenarios. Spoofing scenarios are currently included in CVE.
CVSS Score: 5.1 (MEDIUM)
References: http://www.idefense.com/application/poi/display?id=77&type=vulnerabilities&flashstatus=false; http://www.securityfocus.com/bid/9761; https://exchange.xforce.ibmcloud.com/vulnerabilities/15337
CVE: CVE-2004-2384
Published: 2004-12-31
Description: NullSoft Winamp 5.02 allows remote attackers to cause a denial of service (crash) by creating a file with a long filename, which causes the victim's player to crash when the file is opened from the command line.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/357986; http://www.securityfocus.com/archive/1/358097; http://www.securityfocus.com/bid/9920
CVE: CVE-2004-2385
Published: 2004-12-31
Description: EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information (home directory) via an HTTP request for init.emu.
CVSS Score: 5.0 (MEDIUM)
References: http://members.lycos.co.uk/r34ct/main/emu/emu.txt; http://secunia.com/advisories/11110; http://www.osvdb.org/4203
CVE: CVE-2004-2386
Published: 2004-12-31
Description: Format string vulnerability in the LogMsg function in sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code via format string specifiers passed from the HandleCPCCommand function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd; http://secunia.com/advisories/12351; http://securitytracker.com/id?1011038
CVE: CVE-2004-2387
Published: 2004-12-31
Description: Buffer overflow in the HandleCPCCommand function of sercd before 2.3.1 and sredird 2.2.1 and earlier allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://cvs.lysator.liu.se/viewcvs/viewcvs.cgi/sercd/sercd.c?root=sercd; http://secunia.com/advisories/12351; http://securitytracker.com/id?1011038
CVE: CVE-2004-2388
Published: 2004-12-31
Description: rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/11085; http://www-1.ibm.com/support/docview.wss?uid=isg1IY53507; http://www.ciac.org/ciac/bulletins/o-102.shtml
CVE: CVE-2004-2389
Published: 2004-12-31
Description: Unknown vulnerability in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service (infinite loop) via user re-registration.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10974/; http://securitytracker.com/id?1009248; http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429
CVE: CVE-2004-2390
Published: 2004-12-31
Description: The roster import functionality in Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8, when using libgadu 1.0 and later, allows attackers to cause a denial of service via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10974/; http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429; http://www.securityfocus.com/bid/9710
CVE: CVE-2004-2391
Published: 2004-12-31
Description: Jabber Gadu-Gadu Transport (a.k.a. jabber-gg-transport) 2.0.x before 2.0.8 allows remote attackers to cause a denial of service a message with an empty <priority/> tag.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/10974/; http://www.jabberstudio.org/projects/jabber-gg-transport/releases/view.php?id=429; http://www.securityfocus.com/bid/9710
CVE: CVE-2004-2392
Published: 2004-12-31
Description: libuser 0.51.7 allows attackers to cause a denial of service (crash or disk consumption) via unknown attack vectors, related to read failures and other bugs.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1010187; http://www.mandriva.com/security/advisories?name=MDKSA-2004:044; http://www.redhat.com/support/errata/RHSA-2005-770.html
CVE: CVE-2004-2393
Published: 2004-12-31
Description: Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote attackers to falsely authenticate peers for SSL/TLS.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/11639; http://securitytracker.com/id?1010193; http://sunsolve.sun.com/search/document.do?assetkey=1-26-57560-1
CVE: CVE-2004-2394
Published: 2004-12-31
Description: Off-by-one error in passwd 0.68 and earlier, when using the --stdin option, causes passwd to use the first 78 characters of a password instead of the first 79, which results in a small reduction of the search space required for brute force attacks.
CVSS Score: 2.1 (LOW)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060; http://www.mandriva.com/security/advisories?name=MDKSA-2004:045; http://www.securityfocus.com/bid/10370
CVE: CVE-2004-2395
Published: 2004-12-31
Description: Memory leak in passwd 0.68 allows local users to cause a denial of service (memory consumption) via a large number of failed read attempts from the password buffer.
CVSS Score: 2.1 (LOW)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060; http://www.mandriva.com/security/advisories?name=MDKSA-2004:045; http://www.securityfocus.com/bid/10370
CVE: CVE-2004-2396
Published: 2004-12-31
Description: passwd 0.68 does not check the return code for the pam_start function, which has unknown impact and attack vectors that may prevent "safe and proper operation" of PAM.
CVSS Score: 7.2 (HIGH)
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120060; http://www.mandriva.com/security/advisories?name=MDKSA-2004:045; http://www.securityfocus.com/bid/10370
CVE: CVE-2004-2397
Published: 2004-12-31
Description: The web-based Management Console in Blue Coat Security Gateway OS 3.0 through 3.1.3.13 and 3.2.1, when importing a private key, stores the key and its passphrase in plaintext in a log file, which allows attackers to steal digital certificates.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: http://secunia.com/advisories/11627; http://www.bluecoat.com/support/knowledge/advisory_private_key_compromise.html; http://www.osvdb.org/6218
CVE: CVE-2004-2398
Published: 2004-12-31
Description: Netenberg Fantastico De Luxe 2.8 uses database file names that contain the associated usernames, which allows local users to determine valid usernames and conduct brute force attacks by reading the file names from /var/lib/mysql, which is assigned world-readable permissions by cPanel 9.3.0 R5.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2004-05/0206.html; http://www.securityfocus.com/bid/10390; https://exchange.xforce.ibmcloud.com/vulnerabilities/16197
CVE: CVE-2004-2399
Published: 2004-12-31
Description: Secure Computing Corporation Sidewinder G2 6.1.0.01 allows remote attackers to cause a denial of service (CPU consumption) via delayed responses to DNS queries.
CVSS Score: 5.0 (MEDIUM)
References: http://www.osvdb.org/6231; http://www.securecomputing.com/pdf/SW61002Rel_Notes_0512.pdf; http://www.osvdb.org/6231
CVE: CVE-2004-2400
Published: 2004-12-31
Description: WinFTP Server 1.6 stores username and password credentials in plaintext in the data\user.wfd file, which allows local users to gain access to the credentials.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/13304; http://securitytracker.com/id?1012321; http://www.osvdb.org/12122
CVE: CVE-2004-2401
Published: 2004-12-31
Description: Stack-based buffer overflow in Ipswitch IMail Express Web Messaging before 8.05 might allow remote attackers to execute arbitrary code via an HTML message with long "tag text."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/11352; http://support.ipswitch.com/kb/IM-20031219-DF01.htm; http://www.osvdb.org/5243
CVE: CVE-2004-2402
Published: 2004-12-31
Description: Cross-site scripting (XSS) vulnerability in YaBB.pl in YaBB 1 GOLD SP 1.3.2 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded to parameter.  NOTE: some sources say that the board parameter is affected, but this is incorrect.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2004-09/0227.html; http://secunia.com/advisories/12593; http://www.osvdb.org/10242
CVE: CVE-2004-2403
Published: 2004-12-31
Description: Cross-site request forgery (CSRF) vulnerability in YaBB 1 GOLD SP 1.3.2 allows remote attackers to perform unauthorized actions as the administrative user via a link or IMG tag to YaBB.pl that specifies the desired action, id, and moda parameters.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2004-09/0227.html; http://secunia.com/advisories/12593; http://www.osvdb.org/10243
CVE: CVE-2004-2404
Published: 2004-12-31
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2004-2347.  Reason: This candidate is a duplicate of CVE-2004-2347.  Notes: All CVE users should reference CVE-2004-2347 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2004-2405
Published: 2004-12-31
Description: Buffer overflow in multiple F-Secure Anti-Virus products, including F-Secure Anti-Virus 5.42 and earlier, allows remote attackers to bypass scanning or cause a denial of service (crash or module restart), depending on the product, via a malformed LHA archive.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/11712; http://www.f-secure.com/security/fsc-2004-1.shtml; https://exchange.xforce.ibmcloud.com/vulnerabilities/16258
CVE: CVE-2004-2406
Published: 2004-12-31
Description: Unknown "overflow" in the phpgw_config table for phpGroupWare before 0.9.14.002 has unknown attack vectors and impact.
CVSS Score: 10.0 (HIGH)
References: http://sourceforge.net/project/shownotes.php?release_id=153116; http://www.osvdb.org/7620; http://sourceforge.net/project/shownotes.php?release_id=153116
CVE: CVE-2004-2407
Published: 2004-12-31
Description: Unknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact, related to a "security hole" in the Setup/Config functionality.
CVSS Score: 10.0 (HIGH)
References: http://sourceforge.net/project/shownotes.php?release_id=153116; http://sourceforge.net/project/shownotes.php?release_id=153116
CVE: CVE-2004-2408
Published: 2004-12-31
Description: Linux VServer 1.27 and earlier, 1.3.9 and earlier, and 1.9.1 and earlier shares /proc permissions across all virtual and host servers, which allows local users with the ability to set permissions in /proc to obtain system information or cause a denial of service on other virtual servers or the host server.
CVSS Score: 3.6 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2004-07/0040.html; http://linux-vserver.org/ChangeLog; http://secunia.com/advisories/12021
CVE: CVE-2004-2409
Published: 2004-12-31
Description: Buffer overflow in the sh_hash_compdata function for Samhain 1.8.9 through 2.0.1, when running in update mode ("-t update"), might allow attackers to execute arbitrary code.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/13130; http://securitytracker.com/id?1012142; http://www.osvdb.org/11525
CVE: CVE-2004-2410
Published: 2004-12-31
Description: Unknown vulnerability in sh_hash_compdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service (null pointer dereference).
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1012142; http://www.osvdb.org/11594; http://securitytracker.com/id?1012142
CVE: CVE-2004-2411
Published: 2004-12-31
Description: The CleanseMessage function in shop$db.asp for VP-ASP Shopping Cart 4.0 through 5.0 does not sufficiently cleanse inputs, which allows remote attackers to conduct cross-site scripting (XSS) attacks that do not use <script> tags, as demonstrated via javascript in IMG tags to (1) the cat parameter in shopdisplayproducts.asp or (2) the msg parameter in shoperror.asp, and possibly other vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0363.html; http://secunia.com/advisories/11846; http://www.osvdb.org/6949